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Feds  Again 
Score  Low  on 
FT  Security 

Overall  grade  stays  at  D+;  execs  say 
complexity  works  against  compliance 


BY  GRANT  GROSS  AND 
Robert  McMillan 

WASHINGTON 

A  congressional  committee 
last  week  released  a  report 
card  giving  the  federal  govern¬ 
ment  an  overall  grade  of  D+ 
on  computer  security  for  the 
second  year  in  a  row  —  a  rat¬ 
ing  that  prompted  harsh  words 
from  some  lawmakers 
but  also  sparked  a  de¬ 
bate  over  how  useful 
the  grading  process  is. 

At  a  hearing  on 
Thursday,  members  of 
the  House  Committee 
on  Government  Reform 
lectured  IT  executives  from 
the  Pentagon  and  the  U.S. 
Department  of  Homeland  Se¬ 
curity  about  the  failing  cyber¬ 
security  scores  that  the  two 
agencies  received  as  part  of 
the  panel’s  annual  evaluation. 

“I  don’t  feel  comfortable  that 
my  homeland  is  secure,”  said 
Rep.  Diane  Watson  (D-Calif.). 


In  response,  DHS  CIO  Scott 
Charbo  and  Robert  Lentz, 
director  of  information  assur¬ 
ance  at  the  U.S.  Department 
of  Defense,  said  the  size  of  the 
agencies,  combined  with  their 
widely  dispersed  workforces 
and  varied  missions,  result 
in  complex  IT  environments 
that  are  frequently  modified  as 
business  needs  evolve. 

“We  have  a  very  large 
and  very  diverse  and 
dynamic  organization 
deployed  worldwide,” 
Lentz  said.  “Things  are 
changing  all  the  time.” 
That  can  make  it 
hard  for  the  DHS  and  the  DOD 
to  comply  with  the  Federal 
Information  Security  Manage¬ 
ment  Act,  according  to  Charbo 
and  Lentz.  The  annual  secu¬ 
rity  report  card  issued  by  the 
House  reform  committee  is 
based  on  FISMA,  which  was 
approved  by  Congress  and 

Fed  Grades,  page  16 


An  insurer 
urges  credit 
unions  to 
step  it  up  on 
security. 
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Some  IT  buyers  have 
scrapped  painstaking 
product  evaluations 
in  favor  ot  a  fast-track 
selection  process.  But 
the  shortcuts  introduce 
risks  that  must  be 
managed,  Gary  Anthes 
reports.  PAGE  33 


FBI  Shifts  Into  High  Gear  on 
$425M  Case  File  System 


Taps  lead  vendor, 
sets  new  project 
management  plan 

BY  PATRICK  THIBODEAU 

WASHINGTON 

The  FBI  last  week  said  it  has 
hired  defense  contractor  Lock¬ 
heed  Martin  Corp.  to  build  a 
$425  million  case  management 
and  information-sharing  sys¬ 
tem  designed  to  finally  free 
the  bureau  from  processes  that 
are  still  largely  paper-based. 
The  latest  attempt  at  mod¬ 


ernization,  which  the  FBI 
first  detailed  last  spring,  is 
expected  to  take  six  years  to 
complete,  although  the  bulk 
of  the  work  should  be  done  by 
2009.  Called  Sentinel,  the  new 
technology  takes 
the  place  of  Virtual 
Case  File,  a  proposed 
system  that  was 
abandoned  a  year 
ago  after  four  years 
of  work  and  a  $170 
million  investment. 

Sentinel  is  a  com¬ 
plete  makeover  and 


expansion  of  its  predecessor, 
said  FBI  CIO  Zalmai  Azmi  at  a 
press  conference  here.  Gone  is 
the  proprietary  code  on  which 
the  Virtual  Case  File  system 
was  based.  Instead,  Lockheed 
Martin  will  turn  to  commercial¬ 
ly  available  software  and  build 
Sentinel  on  top  of  a  service- 
oriented  architecture,  he  said. 

In  addition,  Azmi 
has  overhauled  the 
FBI’s  project  man¬ 
agement  procedures 
in  an  attempt  to 
address  criticisms 
—  reiterated  in  a 
government  report 
last  week  —  that  the 
FBI,  page  45 
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Tell  Us  How  Gateway  Can  Transform  Your  Organization 
at  Gateway.com/TellUs/HED 

ENTER  TO  WIN  ONE  OF  FOUR  $15,000 
GATEWAY  TECHNOLOGY  PRIZES! 


TELL  US  YOUR  STORY 


Gateway, 


will  not  improve  your  prices  of  winning.  Void  where  prohibited.  Open  only  to  legal  K-12,  Higher  Ed  Institutions,  Government  Agencies  and  Businesses  with  25  or  more  employees  within  the  50  United  States 
:eived  between  3/23/06  through  7/31/06  to  be  quailed,  limit  one  entry  per  entity.  One  winner  of  $15,000  per  segment.  Complete  sweepstakes  rules  and  regulations  available  online'at  gateway.com/tellus/swsepstakes.  All 
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Gateway  Recommends  Microsoft®  Windows®  XP  Professional. 


GATEWAY  HELPS  HIGHER  ED  GO  HIGH  TECH 

A  lesson  on  reinventing  learning. 

Gateway  is  helping  to  transform  the  learning  environment  at  colleges  and  universities  across 
the  country.  At  the  University  of  Tennessee  at  Martin,  professors  thought  math  and  PCs  were 
a  bad  mix  until  discovering  they  could  handwrite  equations  on  Gateway's  M280-E  Convertible 
Notebook.  And  at  College  of  DuPage,  the  convertible  notebook  is  replacing  the  chalkboard. 
Professors  roam  freely  in  class,  engaging  students  to  problem  solve  on  the  tablet  while  wirelessly 
projecting  the  information  for  the  whole  class.  And  University  of  Texas  at  San  Antonio 
launched  "Air  Rowdy,"  a  wireless  network  enabling  students  and  faculty  access  to  library 
resources,  lectures  and  online  applications  from  anywhere  on  campus. 

Colleges  and  universities  everywhere  are  learning  just  how  invaluable  partnering  with  Gateway 
can  be.  With  a  full  line  of  innovative  technology  like  our  new  convertible  notebook  powered 
by  Intel®  Centrino®  Mobile  Technology1,  the  E-4500  desktop  and  rackmount  and  tower  servers 
supporting  single-core  or  dual-core  Intel®  Xeon®  Processors,  Gateway  is  helping  to  solve 
challenges  in  all  areas  of  education.  Learn  more  about  how  Gateway  is  transforming  higher 
education  with  new  technology. 
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With  Sybase®  software,  the  PRC  Ministry  of  Railways 
developed  an  innovative  ticket  sales  and  reservation  system  that: 


C  Processes  passenger  traffic  of  more  than  one  billion  people  a  year 

JTj  Handles  up  to  5,000  ticket  requests  simultaneously 

[  |  Captures  and  analyzes  passenger  data  on  national,  regional  and  local  levels 


Replacing  an  outdated,  paper-based  ticketing  system  that  supports  one  of  the  largest  railway  networks  in  the  world  is  a  monumental  task.  That's  why, 
when  the  People's  Republic  of  China  (PRC)  Ministry  of  Railways  wanted  the  right  technology  partner,  they  chose  Sybase.  Using  Sybase  Adaptive  Server® 
Enterprise,  Sybase®  10,  and  Replication  Server®  software,  the  PRC  created  an  information  edge  that  enables  passengers  to  purchase  round-trip  or 
one-way  tickets  from  24  regional  ticket  centers,  510  booking  systems  and  over  5,000  counter  terminals.  That  means  customers  are  happier.  Employee 
productivity  is  up.  And  trains  are  filled  with  people  ...and  profits,  www.sybase.com/infoedgell6 

Copyright  ©2006  Sybase,  Inc.  All  rights  reserved.  Sybase,  the  Sybase  logo,  Adaptive  Server  and  Replication  Server  are  trademarks  of  Sybase,  Inc. 

®  indicates  registration  in  the  United  States  of  America.  All  product  and  company  names  are  trademarks  of  their  respective  owners. 


*7^ 


CONTENTS 


03.20.06 


in  Google’s  Shadow 

In  the  Technology  section:  Major  Web  search 
companies  like  Google  and  Yahoo  are  grabbing 
headlines,  but  they’re  far  from  the  cutting  edge 
of  enterprise  search  technology.  Page  23 


It’s  Not  Easy  Being  Green 

In  the  Management  section:  Eco-friendly  computing 
is  an  idea  whose  benefits  will  become  more  ap¬ 
parent  over  the  next  few  years.  Here’s  what  it’s  all 
about.  Page  36 
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ACUNA  Mutual  Group  prods  the 

O  credit  unions  it  insures  to  adopt 

A  A  Net  Gains.  Internet  pioneers 
LURobert  E.  Kahn  and  Vinton  : 

a  set  of  security  measures  aimed 
at  blocking  fraudulent  credit-  and 
debit-card  transactions. 

6  A  programming  error  in  a 

McAfee  antivirus  update 
causes  the  software  to  label  legiti¬ 
mate  programs  as  a  virus. 

7  Nortel  will  have  to  revise  its 
financial  results  again  because 
of  accounting  errors,  but  some  big 
customers  said  they  don’t  see  the 
new  plan  as  a  cause  for  concern. 

7  Eclipse  users  eye  an  open-source 
application  life-cycle  manage¬ 
ment  tool  that  is  due  in  the  fall. 

4  A  Fidelity  National  Financial 

IU  replaces  its  EMC  storage  sys¬ 
tem  with  more  flexible  and  reli¬ 
able  SAN  products  from  Hitachi 
Data,  IBM  and  other  vendors. 

4AQ&A:  Sun  CIO  Bill  Vass  has  his 

IfcIT  staff  working  on  two  big 
projects  this  year:  developing  an 
internal  computer  grid  and  con¬ 
solidating  three  ERP  systems. 

M Global  Dispatches:  The  ministry 
in  charge  of  China’s  IT  indus¬ 
try  starts  working  to  fulfill  the 
technology  goals  of  the  country’s 
latest  five-year  plan. 

4"%  CA  unveils  a  product  family 
If  that  integrates  existing  soft¬ 
ware  delivery,  asset  management 
and  remote-control  tools. 

4AQ&A:  Rick  LaPlante,  general 
Iv  manager  of  Visual  Studio  2005, 
discusses  the  delayed  Team  Foun¬ 
dation  Server  piece  of  Microsoft’s 
development  tool  set. 


pert  Guru  Parulkar,  comment  on 
the  Internet’s  past  and  present 
—  and  speculate  that  we  might 
have  an  interplanetary  Net  within 
10  years. 

AAFuture  Watch:  Automagic  Code 
bOGenerators.  Techniques  for 
generating  software  automati¬ 
cally  have  existed  for  decades.  But 
now  researchers  are  taking  it  to  a 
higher  level. 

M  Security  Manager’s  Journal: 

Expecting  All-in-One  Security 
Headaches.  The  state  is  imposing 
all-in-one  security  appliances  on 
C.J.  Kelly’s  agency,  and  already 
she  sees  more  cons  than  pros. 

IUNA6EMEHT 

A  A  Rush  to  Judgment.  Selecting 
UUIT  products  is  getting  more 
complex  as  vendors  and  their  of¬ 
ferings  proliferate.  Buyers  are  re¬ 
sponding  by  slashing  their  lists  of 
preferred  suppliers  and  fast-track¬ 
ing  the  product-selection  process. 

M  Managers’  Forum.  What  do 
you  do  when  your  manager 
wants  you  to  explain  highly  tech¬ 
nical  work  in  a  sound  bite?  Paul 
Glen  has  some  suggestions.  He 
also  offers  advice  about  dealing 
with  a  brilliant  techie  who  can’t 
hit  a  deadline. 

M  Career  Watch.  Premier  100  IT 
Leader  Hari  Bezwada  answers 
readers’  questions  about  career 
moves.  Plus,  we  look  at  the  health 
of  the  U.S.  IT  career  landscape  and 
the  rise  in  tech-support  salaries. 


OPINIONS 


I  On  the  Mark:  Mark  Hall  reports  on 
a  Wikipedia-like  online  contact 
lanagement  service  that  sub¬ 
tracts  points  when  a  user  adds  to 
his  personal  list  from  a  database. 

A  A  Don  Tennant  believes  the  adop- 
dtUtion  of  a  technology  standard 
must  be  based  solely  on  what’s  in 
the  best  interests  of  the  user  com¬ 
munity,  not  on  the  influence  of  IT 
vendor  lobbying. 

AAThornton  A.  May  finds  HR  in- 
fcUcreasingly  out  of  touch  with 
the  needs  of  a  mobile  and  highly 
skilled  IT  workforce. 

A4  David  Moschella  sees  four  main 
fclways  that  IT  organizations 
seek  to  differentiate  themselves. 

AA  Robert  L.  Mitchell  tackles  the 
Ufcmyth  that  IT  is  a  dead-end 
career. 

A  A  Barbara  Gomolski  was  a 

Til  gung-ho  advocate  of  online 
bill  paying  in  the  early  days.  It 
seemed  like  a  great  idea,  largely 
enabled  by  IT.  But  she  has  recent¬ 
ly  developed  a  more  conservative 
strategy  regarding  this  “improve¬ 
ment.” 
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[Frankly  Speaking:  Frank  Hayes 

doesn’t  know  whether  the  FBI 
has  gotten  things  right  this  time 
with  its  plan  for  a  case  manage¬ 
ment  system,  but  at  least  we  won’t 
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In  Search  of  Lower  Stress 

CAREERS:  If  your  work  stresses  you  out, 
consider  these  tips  from  CareerJournal.com 
before  changing  jobs.  Keep  in  mind  that 
what  might  seem  effortless  to  one  individual 
may  seem  excruciating  to  another. 

O  QuickLink  a8300 

Solid-State  Disk:  Forever 
A  Storage  Bridesmaid? 

STORAGE:  One  enterprise- 
class  SSD  product  will  fit 
most  Oracle  databases, 
eliminating  the  need  for 
a  giant  Unix  server,  says 
columnist  Steve  Duplessie. 

©  QuickLink  a8340  i 

Security  Scorecard 

See  grades  from  the  past  five  years  of  the 
House  Committee  on  Government  Reform’s 
security  report  card.  ©  QuickLink  a8320 

Compact  and  Convenient 

MOBILE/WIRELESS:  For  portability  in  docu¬ 
ment  scanning,  Planon’s  DocuPen  RC800, 
while  pricey,  is  worth  a  look,  writes  gadget 
columnist  Michelle  Johnson. 

©  QuickLink  a8330 

Computerworld  Hardware  Blogs 

Every  weekday,  catch  up  on  the  latest 
commentary  and  observations  from 
Computer-world's  hardware  bloggers. 

©  QuickLink  a8290 

Computerworld  TechCast 

AUDIO:  This  weekly  podcast  delivers  sum¬ 
maries  of  key  technologies  and  concepts. 
Listen  in  your  browser,  or  subscribe  to  the 
RSS  feed  and  download  new  installments  to 
your  MP3  player.  ©  QuickLink  a7780 
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AT  DEADLINE 


Lenovo  Cuts  Ik  Jobs, 
Moves  Headquarters 

Lenovo  Group  Ltd.  plans  to  lay 
off  1,000  employees,  or  about 
5%  of  its  workforce,  and  move 
its  corporate  headquarters  from 
Purchase,  N.Y.,  to  Raleigh,  N.C., 
in  the  face  of  increasing  com¬ 
petition.  The  cuts  will  be  spread 
across  Lenovo’s  worldwide  of¬ 
fices.  Lenovo  President  William 
Amelio  said  the  move  was  made 
in  part  “to  bring  our  expense-to- 
revenue  ratio  closer  to  industry 
benchmarks  and  simplify  our 
organizational  structure.” 


Microsoft  Sues  eBay 
Users  for  Bootlegs 

Microsoft  Corp.  has  hied  suit 
against  eight  users  of  eBay 
Inc.’s  auction  site  for  allegedly 
selling  counterfeit  copies  of  the 
company’s  software  online.  The 
lawsuits,  part  of  Microsoft’s 
continuing  effort  to  crack  down 
on  distributors  of  illegal  software, 
were  hied  in  courts  in  Arizona, 
Connecticut,  Florida,  Hawaii, 
Massachusetts,  Nebraska,  New 
York  and  Washington. 


Adobe  Hires  Sun’s 
Top  Software  Exec 

John  Loiacono  will  be  leaving 
his  post  as  Sun  Microsystems 
Inc.’s  top  software  executive  on 
Friday  to  join  Adobe  Systems 
Inc.  as  senior  vice  president  of 
its  Creative  Solutions  business 
unit.  Loiacono  had  succeeded 
Jonathan  Schwartz  as  executive 
vice  president  of  software  at  Sun 
about  two  years  ago.  At  Adobe, 
Loiacono  will  report  to  Shantanu 
Narayen,  Adobe’s  president  and 
chief  operating  officer. 


Softbank  to  Buy 
Vodafone  Unit 

Softbank  Corp.  has  agreed  to 
buy  Vodafone  Group  PLC’s  strug¬ 
gling  Japanese  mobile  phone 
unit  for  $15.3  billion.  Vodafone 
said  the  division  had  been  un¬ 
likely  to  bring  it  “superior  long¬ 
term  returns.”  Vodafone  CEO 
Arun  Sarin  acknowledged  that 
the  unit  was  late  in  implementing 
3G  mobile  technology.  The  deal 
is  expected  to  close  by  June. 


Insurer  Urges  Credit  Unions 
To  Tighten  Up  on  Security 


CUNA  Mutual  pushes  new  antifraud 
measures  for  card-based  transactions 


BY  JAIKUMAR  VIJAYAN 

An  insurance  firm 
is  calling  on  the 
5,500  credit  unions  it 
works  with  to  imme¬ 
diately  adopt  a  set  of  security 
measures  in  an  effort  to  curb 
growing  losses  from  credit 
and  debit  card  fraud. 

The  insurer,  CUNA  Mutual 
Group,  last  week  released  a 
nine-page  document  detailing 
13  broad  security  measures 
and  more  than  70  specific 
recommendations  for  credit 
unions  that  issue  cards. 

For  instance,  it’s  recom¬ 
mending  that  credit  unions  do 
round-the-clock  monitoring  of 
transactions  and  develop  auto¬ 
mated  capabilities  for  immedi¬ 
ately  acting  on  fraud  alerts. 

CUNA  Mutual  isn’t  mak¬ 
ing  adoption  of  the  security 
guidelines  a  requirement  for 
its  credit  union  customers.  But 
the  company  will  factor  in 
what  each  credit  union  does  to 
fight  fraud  when  underwriting 
insurance  polices  in  the  future, 
said  Chris  Ryan,  director  of 
credit  union  protection  at  the 


Madison,  Wis.-based  insurer. 

“What’s  driving  this  is 
the  significant  increase  in 
fraud  losses  that  we  have 
seen  across  the  credit  union 
marketplace  over  the  last  18 
months,”  Ryan  said.  He  added 
that  credit  unions  and  CUNA 
Mutual  suffered  a  combined 
total  of  about  $100  million  in 
losses  from  credit  and  debit 
card  fraud  last  year  —  up  15% 
from  2004  and  50%  from  2003. 

Steve  Swofford,  CEO  of 
Alabama  Credit  Union  in 
Tuscaloosa,  said  his  organiza¬ 
tion  has  implemented  or  is  in 
the  process  of  implementing 
most  of  the  security  measures 
prescribed  by  CUNA  Mutual. 
Even  so,  ACU  this  year  for  the 
first  time  expects  to  file  claims 
to  cover  its  losses  from  credit 
and  debit  card  fraud,  he  said. 

“We’ve  never  been  able  to 
claim  insurance,  because  our 
losses  were  relatively  low,”  he 
said.  But  this  year’s  fraud  loss¬ 
es  likely  will  exceed  ACU’s 
deductible  for  such  coverage, 
according  to  Swofford. 

As  a  result  of  such  claims, 


SECURITY  plan 


CUNA  Mutual’s  recommen¬ 
dations  for  fighting  card 
fraud  include  the  following: 

Monitor  for  fraudulent  activi¬ 
ty  around  the  dock,  with  automated 
capabilities  for  responding  to  alerts. 

Set  your  authorization  sys¬ 
tem  to  decline  transactions  in  which 
the  name  transmitted  via  a  card's 
magnetic  stripe  doesn’t  match  the 


Require  use  of  the  Credit 
Card  Verification  Value  and 
Card  Validation  Code  on  all  PIN- 
based  Visa  and  MasterCard  debit 
transactions. 


it’s  almost  inevitable  that 
CUNA  Mutual’s  recommenda¬ 
tions  will  eventually  become 
a  requirement  for  insurance 
coverage,  Swofford  said. 

Corinne  Sherman,  vice  pres¬ 
ident  of  card  services  at  the 
Pennsylvania  Credit  Union 
Association  in  Harrisburg, 
said  she  thinks  the  new  securi¬ 
ty  initiative  will  go  a  long  way 
toward  reducing  fraud  losses 
within  the  industry. 

However,  the  changes  could 
cost  credit  unions  money  in 
the  near  term,  Sherman  added. 


McAfee  Antivirus  Update 
Wreaks  Havoc  on  Systems 


Flaw  in  code  leads 
software  to  label 
legit  apps  as  virus 

BY  JAIKUMAR  VIJAYAN 

A  faulty  antivirus  software 
update  distributed  by  McAfee 
Inc.  this  month  mistakenly 
identified  hundreds  of  legiti¬ 
mate  programs  as  a  Windows 
virus  —  a  mix-up  that  led 
some  unsuspecting  corporate 
users  to  accidentally  delete 
data  from  affected  computers. 

The  update,  released  by 
McAfee  on  March  10,  was 
designed  to  protect  systems 
against  the  W95/CTX  virus. 


But  because  of  a  programming 
error,  the  update  also  incor¬ 
rectly  identified,  renamed  and 
quarantined  hundreds  of  legit¬ 
imate  executables,  including 
popular  ones  such  as  reg.exe, 
excel.exe,  lsetup.exe,  shut- 
down.exe  and  uninstall.exe. 

Santa  Clara,  Calif.-based 
McAfee  replaced  the  flawed 
update  with  a  new  patch  five 
hours  after  the  first  release. 
But  for  customers  that  had 
configured  their  antivirus  pro¬ 
grams  to  automatically  delete 
bad  files,  the  error  resulted 
in  the  loss  of  hundreds  or,  in 
some  cases,  thousands  of  files, 
said  Johannes  Ullrich,  chief 


research  officer  at  the  SANS 
Institute  in  Bethesda,  Md. 

“A  lot  depended  on  how  you 
had  McAfee  configured  on 
your  system,”  Ullrich  said.  “If 
you  had  it  configured  to  basi¬ 
cally  quarantine  bad  files,  you 
were  OK,  because  in  this  case 
it  wasn’t  too  hard  to  recover 
the  quarantined  files.  But  if 
you  had  it  delete  them,  then 
[recovering  the  lost  files]  be¬ 
came  a  lot  harder.” 

SANS  received  reports  from 
“dozens”  of  companies  report¬ 
ing  incorrectly  quarantined  or 
deleted  files,  he  added. 

Joe  Telafici,  director  of  op¬ 
erations  at  McAfee’s  virus  re¬ 
search  unit,  said  the  problem 
was  the  result  of  “a  subtle  logic 
flaw.”  The  error  resulted  in  at 
least  290  executable  files  being 


“I  think  the  immediate  impact 
is  going  to  be  a  bit  overwhelm¬ 
ing  for  credit  unions  to  get  ev¬ 
erything  in  place,”  she  said. 

Ryan  acknowledged  that 
CUNA  Mutual’s  Plastic  Card 
Security  Best  Practices  in¬ 
clude  a  mix  of  “common  sense” 
measures  and  more  involved 
steps  that  could  result  in  in¬ 
creased  costs  for  credit  unions. 

CUNA  Mutual’s  recommen¬ 
dations  appear  to  be  an  effort 
to  raise  the  bar  above  the  lev¬ 
els  set  by  the  Payment  Card 
Industry  security  mandates 
that  were  imposed  last  year  by 
the  major  credit  card  associa¬ 
tions,  said  John  Pescatore,  an 
analyst  at  Gartner  Inc. 

“PCI  is  all  about  protect¬ 
ing  online  transactions  and 
[securely]  storing  credit  card 
data,”  Pescatore  said.  He 
added  that  CUNA  Mutual’s 
guidelines  are  focused  more 
directly  on  mitigating  losses 
from  fraudulent  uses  of  cards. 

As  part  of  a  broader  set  of 
antifraud  initiatives,  CUNA 
Mutual  also  is  lobbying  card 
associations  for  stronger 
data-protection  standards  and 
advocating  litigation  against 
merchants  that  allegedly  fail 
to  demonstrate  due  diligence 
in  safeguarding  sensitive  data. 
Last  April,  it  filed  a  lawsuit 
against  BJ’s  Wholesale  Club 
Inc.  seeking  to  recover  losses 
resulting  from  a  security 
breach  at  the  retailer. » 


incorrectly  identified  as  the 
targeted  virus,  he  said. 

“We  are  looking  at  a  rela¬ 
tively  small  percentage  of  our 
customer  base”  that  was  af¬ 
fected,  Telafici  said.  “But  it  is 
a  large  problem  for  those  who 
were  impacted.” 

McAfee’s  antivirus  software 
for  home  users  and  small 
businesses  includes  a  feature 
that  can  automatically  restore 
quarantined  files.  Through  its 
support  organization,  McAfee 
has  begun  offering  a  similar 
tool  to  corporate  users,  Tela¬ 
fici  said.  The  tool  also  can  be 
downloaded  online. 

McAfee  is  working  on 
another  tool  that  potentially 
could  help  companies  restore 
some  of  the  files  that  were 
deleted,  Telafici  said. » 
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Users  Taking  Nortel’s  Latest  Restatement  in  Stride 

Vendor  finds  more  accounting  miscues, 
says  no  improper  conduct  is  apparent 


BY  MATT  HAMBLEN 

Some  major  customers  of  Nor¬ 
tel  Networks  Corp.  last  week 
said  they  were  unfazed  by  the 
company’s  announcement  that 
it  will  again  restate  its  financial 
results  because  of  accounting 
errors. 

“Nobody  is  upset  or  con¬ 
cerned,”  said  Steve  Ford, 
president  of  the  International 
Nortel  Networks  Users  As¬ 
sociation  (INNUA)  in  Chicago. 
“We  kind  of  take  [the  planned 
restatements]  like  water  off  a 
duck’s  back.” 

With  about  5,000  members, 
INNUA  is  the  largest  Nortel 
user  group.  Ford  said  the 
INNUA  board  was  holding  a 
meeting  on  March  10  when 
Nortel’s  management  called  to 
inform  the  board  members  of 


the  restatement  plans,  which 
were  announced  that  day. 

“They  explained  things  and 
get  credit  for  contacting  us  pro¬ 
actively.  It’s  not  that  Nortel  lost 
revenue.  They  just  put  it  in  the 
wrong  quarter,”  said  Ford,  who 
is  coordinator  of  electronic 
services  at  Northeastern  State 
University  in  Tahlequah,  Okla. 

Ford  said  he  remains  satis¬ 
fied  with  the  performance  of 
the  Nortel  products  installed 
at  Northeastern  State.  He 
oversees  three  campus  voice 
networks  that  run  entirely  on 
Nortel  gear,  and  he  is  slowly 
introducing  voice-over-IP 
phones  made  by  the  vendor. 

Nortel  said  the  planned  re¬ 
statement  of  its  results  for  2003, 
2004  and  the  first  nine  months 
of  2005  primarily  stems  from 


a  need  to  correct  errors  in 
reporting  revenue  that  should 
have  been  deferred  to  future 
quarters.  The  restatements  are 
also  expected  to  include  adjust¬ 
ments  to  the  figures  for  prior 
years,  said  Brampton, 
Ontario-based  Nor¬ 
tel,  which  is  delaying 
the  release  of  its  2005 
Form  10-K  report  until 
next  month. 

“Although  the  need 
to  restate  certain  finan¬ 
cial  statements  is  un¬ 
fortunate,  it’s  the  right 
thing  to  do,”  Nortel 
CEO  Mike  Zafirovski 
said  in  a  statement  is¬ 
sued  March  10.  All  of 
the  revenue  that  was  account¬ 
ed  for  prematurely  “is  real,” 
he  added.  “It  was  [just]  recog¬ 
nized  in  the  wrong  periods.” 

In  a  follow-up  statement  last 
Monday,  Nortel  said  the  review 
of  customer  contracts  that  trig¬ 


gered  the  new  restatements 
didn’t  include  an  investigation 
of  possible  improper  conduct 
by  company  employees.  The 
networking  vendor  said  it 
would  continue  to  examine 
worker  conduct,  but  it 
added  that  no  wrongdo¬ 
ing  was  apparent.  Nor¬ 
tel  ousted  10  corporate 
and  finance  executives 
as  part  of  an  earlier 
series  of  restatements 
completed  last  year. 

Fred  Gratke,  assis¬ 
tant  vice  president  of 
telecommunications 
at  The  Burlington 
Northern  and  Santa 
Fe  Railway  Co.  in  Fort 
Worth,  Texas,  said  via  e-mail 
that  the  planned  restatements 
shouldn’t  detract  from  Nortel’s 
strong  points. 

“I  have  to  believe  this  is  re¬ 
flective  of  poor  financial  man¬ 
agement  but  does  not  have  any 


adverse  impact  [on]  Nortel’s 
technical  capability  or  product 
reliability,”  Gratke  said. 

But  Zeus  Kerravala,  an 
analyst  at  Yankee  Group  Re¬ 
search  Inc.  in  Boston,  said  the 
restatement  plan  could  hurt 
Nortel’s  reputation  with  some 
customers.  “They  need  to  end 
this  and  put  it  behind  them,” 
he  said.  “It  doesn’t  fill  you  with 
confidence  that  the  manage¬ 
ment  team  is  fixed  yet.” 

One  of  the  strongest  reac¬ 
tions  to  the  restatement  plan 
came  from  Bill  Lesieur,  an 
analyst  at  Technology  Busi¬ 
ness  Research  Inc.  in  Hamp¬ 
ton,  N.H.  “Wow,  what  a  mess!” 
he  said  in  an  e-mail.  “Just 
when  you  think  it  can’t  get  any 
worse  for  poor  old  Nortel,  an¬ 
other  bombshell.” 

Lesieur  added  that  it  seems 
to  be  “the  right  time  for  the 
board  of  directors  to  flip  the 
switch  to  break  up  Nortel  for 
divestiture”  —  a  suggestion 
that  both  Ford  and  Gratke  de¬ 
scribed  as  an  overreaction. » 


GRATKE:  The 
restatements 
shouldn’t 
affect  Nortel’s 
development 
capabilities. 


Eclipse  Adding  Tools  to  Manage  App  Life  Cycle 


BY  HEATHER  HAVENSTEIN 

The  Eclipse  Foundation  this 
week  will  detail  plans  to  ex¬ 
pand  its  traditional  focus  on 
individual  open-source  devel¬ 
opment  tools  by  adding  a  proj¬ 
ect  for  managing  the  entire 
application  life  cycle. 

During  its  EclipseCon  con¬ 
ference,  which  starts  today  in 
Santa  Clara,  Calif.,  officials  of 
the  open-source  community 
are  expected  to  provide  further 
information  on  the  Application 
Lifecycle  Management  (ALM) 
Project  under  development  by 
several  of  its  members. 

The  Eclipse  ALM  system 
promises  to  tie  together  de¬ 
velopment  tools  from  multiple 
vendors  without  requiring 
point-to-point  integration. 

Eclipse  is  targeting  users 
like  Loren  Larsen,  chief  archi¬ 
tect  at  World  Wide  Packets 
Inc.  in  Spokane  Valley,  Wash. 

Larsen  said  he  would  be 
interested  in  using  Eclipse’s 
ALM  project  to  help  his  com¬ 
pany  avoid  having  to  buy  an 
integrated  suite  from  the  likes 
of  Microsoft  Corp.  or  IBM’s 


EclipseCon  News 


The  Eclipse  Foundation  will  an¬ 
nounce  Cailisto,  a  new  coordinated 
release  program  combining  10 
large  Eclipse  projects. 

Eclipse  will  announce  two  new 
Rich  Client  Platform  projects. 


Eclipse’s  PHP  project  led  by 

Zend  Technologies  is  now  available. 

. 

IBM  and  Boriand  Software  Corp. 
have  joined  forces  for  a  new  mod¬ 
eling  project. 

IBM  has  stepped  up  its  par¬ 
ticipation  in  the  Eclipse  S0A  Tools 
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Salesforce.com  has  joined 

Eclipse  and  has  developed  a  tool 
kit  for  Eclipse  developers. 
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IBM  has  begun  a  pilot  program 
to  offer  support  to  all  Eclipse  users. 


Rational  Software  unit.  Larsen 
said  he  would  prefer  to  use 
best-of-breed  tools  for  the 
elements  in  the  life  cycle. 

“[Open-source  ALM]  is  the 
only  way  we  will  get  a  lot  of 
the  different  tool  vendors  to 
come  to  the  table  and  provide 


a  single  platform  everyone  can 
use,”  he  said. 

Larsen  said  his  company, 
which  provides  Ethernet  prod¬ 
ucts  to  telecommunications 
carriers,  now  uses  incompati¬ 
ble  requirements  management, 
scheduling,  defect-tracking, 
compiler  and  software  con¬ 
figuration  management  tools. 

The  Eclipse  Foundation 
plans  to  roll  out  proof-of- 
concept  code  for  ALM  at  the 
conference,  said  Ian  Skerrett, 
the  organization’s  director  of 
marketing. 

More  than  30  vendors  have 
signed  on  to  support  the  proj¬ 
ect,  which  was  launched  by 
Eclipse  member  Serena  Soft¬ 
ware  Inc.  last  spring.  The  com¬ 
pleted  ALM  code  is  expected 
to  be  available  in  October, 
Skerrett  said. 

The  Right  Fit 

Tim  Farmer,  manager  of  the 
software  architect  team  at 
Choice  Homes  Inc.  in  Arling¬ 
ton,  Texas,  plans  to  look  at 
Eclipse  ALM  as  a  potential 
response  to  demands  that  his 


Eclipse  at  a  Glance 
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development  group  account 
for  the  time  and  resources  it 
spends  on  specific  projects. 

Choice  Homes  has  been 
using  a  beta  version  of  Micro¬ 
soft’s  Visual  Studio  2005  Team 
Foundation  Server  and  some 
third-party  tools  to  manage 
projects,  but  so  far,  “nothing 
fits  really  well,”  he  said. 

“Eclipse  is  something  we 
will  probably  have  to  look  at 
before  we  make  a  decision 
on  the  Microsoft  platform,” 
Farmer  added. 

Meanwhile,  Compuware 
Corp.  will  be  announcing  a 
new  Eclipse  project  called  the 
Eclipse  Tools  Service  Frame¬ 
work,  also  known  as  Corona, 
which  aims  to  support  col¬ 
laboration  among  tools  using 
the  Eclipse  ALM.  Compuware 
is  developing  the  code  for  the 
Eclipse  Foundation  project. 


The  Corona  project  in¬ 
cludes  a  server-side  frame¬ 
work  built  on  Eclipse  that 
supports  tools  from  multiple 
vendors  and  collects  metrics 
about  events  like  the  number 
of  bugs  or  exceptions  that 
have  been  reported. 

The  system  collates  the 
metrics  into  a  central  location 
where  IT  managers  can  view 
the  overall  development  proc¬ 
ess,  said  Mike  Burba,  market¬ 
ing  director  for  Eclipse  project 
and  strategy  at  Detroit-based 
Compuware. 

Carey  Schwaber,  an  analyst 
at  Forrester  Research  Inc., 
said  the  popularity  of  Eclipse 
with  developers  has  bubbled 
up  awareness  of  the  open- 
source  tools  to  IT  managers. 
“It  is  one  of  the  things  that 
shows  Eclipse  is  entering  a 
second  generation,”  she  said.  > 
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VeriSign  to  Buy 
Broadband  Firm 

VeriSign  Inc.  has  agreed  to  ac¬ 
quire  Kontiki  Inc.  in  Sunnyvale, 
Calif.,  for  S62  million.  VeriSign 
said  the  move  will  allow  it  to 
enter  the  broadband  content  ser¬ 
vices  business.  The  Kontiki  sys¬ 
tem  will  form  the  “cornerstone” 
of  VeriSign’s  Broadband  Content 
Services,  supporting  the  legal 
distribution  of  rich  digital  media 
over  IP  networks,  VeriSign  said. 
The  deal  is  expected  to  close  in 
the  first  quarter. 


McAfee  Promotes 
Weiss  to  President 

McAfee  Inc.  has  promoted  Kevin 
Weiss,  its  former  executive  vice 
president  of  worldwide  sales,  to 
president.  He  succeeds  Gene 
Hodges,  who  departed  in  Janu¬ 
ary  to  become  president  and  CEO 
of  Websense  Inc.  At  the  same 
time,  McAfee  promoted  Chief 
Financial  Officer  Eric  Brown  to 
chief  operating  officer.  Brown 
replaces  Stephen  Richards,  who 
retired  at  the  end  of  2004. 


Unisys  Selling  Stake 
In  Japanese  Unit 

Unisys  Corp.  plans  to  sell  its 
28%  stake  in  its  Tokyo-based 
affiliate,  Nihon  Unisys  Ltd.  The 
sale,  which  is  due  to  be  complet¬ 
ed  this  week,  is  part  of  the  Blue 
Bell,  Pa.-based  vendor’s  plan  to 
divest  noncore  assets.  The  deal 
is  expected  to  fetch  more  than 
$350  million  for  Unisys,  which 
will  use  the  money  to  fund  an 
ongoing  corporate  restructuring 
effort.  Unisys  wouldn’t  identify 
the  buyer. 


Microsoft  Adds  Bl 
Optimization  Tool 

Microsoft  Corp.  has  unveiled  a 
new  business  intelligence  tool 
for  midsize  companies  looking  to 
use  analytics  and  scorecards  to 
study  data  through  various  or¬ 
ganizational  roles.  The  Business 
Intelligence  Optimization  tool 
was  jointly  developed  with  Nex- 
Vue  Analytics  Corp.  It  was  built 
on  SQL  Server  Analysis  Services 
and  integrates  with  SQL  Server 
2000  and  2005. 


[ON  THE  MARK 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  BUZZ  BY  MARK  HALL 


Solve  the  Puzzle 
Of  Contact . . . 


. . .  management  with  an  online,  Wikipedia-like  service.  In 

an  audience  poll  at  Computerworld’ s  Premier  100  IT 
Leaders  Conference  this  month,  62%  of  the  163  respon¬ 
dents  said  their  IT  departments  are  responsible  for 
developing  and  supporting  contact  management 


systems  for  users  in 
sales  and  marketing. 

And  in  most  cases, 
the  poll  showed,  the 
monthly  cost  is  more 
than  $50  per  end  user. 

What  they  —  and  you 
—  might  consider  is 
Jigsaw  Data  Corp.’s  online 
contact  management  service. 
“Jigsaw  is  Dun  &  Bradstreet 
Reports  meets  Wikipedia,” 
quips  Jim  Fowler,  CEO  of  the 
San  Mateo,  Calif. -based  com¬ 
pany.  Its  namesake  service 
includes  a  system  that  gives 
users  200  points  to  start  with. 
For  each  business  contact 
that  you  add  to  your  personal 
list  from  Jigsaw’s  database  of 
more  than  2.5  million  people, 
the  system  subtracts  five 
points.  For  every  accurate 
name  that  you  add  to  the 
database,  you  snag  10  points. 
But  if  you  put  in  bad  informa¬ 
tion,  Jigsaw  takes  an  equal 
number  of  points  out  of  your 
account.  Although  you  can 
avoid  charges  by  accruing  and 
selling  points,  Fowler  says 
that  few  users  do  so.  Most 
Jigsaw  members  simply  pay 
$25  per  month,  or  less  with 


corporate  discounts. 
Fowler  says  Jigsaw 
has  52,000  members 
and  adds  10,000 
new  contacts  to  its 
database  daily.  You 
can  sort  them  by  in¬ 
dustry,  job  function, 
geography  and  other  param¬ 
eters.  You  also  can  import 
and  export  data  from  and  to 
Outlook,  Salesforce.com  and 
other  applications.  Over  the 
course  of  this  year,  Fowler 
says,  Jigsaw  will  be  bulking 
up  its  corporate  profiles  to 
provide  detailed  competitive 
information. 

‘The  Y2k  of  SOX  is 
over,  and  now  it’s . . . 

. . .  time  to  manage  the  process 
better.”  That  is  Mark  Portu’s 
advice  on  complying  with  the 
Sarbanes-Oxley 
Act  and  other 
regulations. 

According  to 
Portu,  senior 
vice  president 
of  compli¬ 
ance  solutions 
at  Open  Text 
Corp.  in  Water- 


154k+ 

Number  of 
companies 
represented  in 
Jigsaw.com 


v  Ji 

PORTU  says 


[o forget  poinl 
Solutions  for 
compliance. 


loo,  Ontario,  companies  need 
a  broader  view  of  compliance 
that  goes  beyond  point  solu¬ 
tions  for  specific  regulations 
—  one  that  encompasses  all  as¬ 
pects  of  records  management. 
He  claims  that  Version  3.0  of 
Open  Text’s  Internal  Controls 
software,  due  next  week,  will 
help  users  manage  documents 
related  to  financial,  environ¬ 
mental,  labor  and  other  regu¬ 
latory  requirements  in  coun¬ 
tries  such  as  the  U.S.,  Canada 
and  European  Union  member 
nations.  Portu  says  an  average 
implementation  runs  about 
$280,000. 

‘What,  me  worry?’ 
That  could  be . . . 

...  the  corporate  slogan  of  the 
early  21st  century.  A  Gart¬ 
ner  Inc.  study  released  this 
month  reveals  that  99%  of 
companies  “will  not  be  able 
to  respond  to  an  avian  influ¬ 
enza  outbreak.”  And  Genesys 
Conferencing 
Inc.  in  Reston, 

Va.,  polled  586 
of  its  users 
last  month  and 
learned  that 
60%  of  them 
either  didn’t 
have  a  busi¬ 
ness  continuity 
plan  or  didn’t  know  if  they 
did.  Denise  Persson,  execu¬ 
tive  vice  president  of  global 
markets  at  Genesys,  says 
the  survey  helped  prompt 
the  company  to  offer  its 
Emergency  Meeting  Center 
service.  Users  get  a  toll-free 
number  that  can  handle  200 
or  more  callers  dialing  in  to 
receive  instructions  on  what 
to  do  in  the  face  of  a  disaster. 
There’s  no  charge  to  sign  up. 
If,  heaven  forbid,  you  do  need 
it,  you’re  charged  for  the  min¬ 
utes  you  use. 

Read  the  SLA’s  fine 
print  before . . . 

...  you  sign  up  for  hosted  CRM. 

In  the  aftermath  of  a  series 
of  outages  affecting  users  of 
Salesforce.com  Inc.’s  online 


CRM  service,  Natalee  Roan, 
chief  marketing  officer  at 
Salesforce.com  rival  Entel- 
lium  Corp.,  advises  CIOs  to 
take  a  hard  look  at  any  soft- 
ware-as-a-service  vendor’s 
service-level 
agreement 
(SLA)  before 
signing  up. 

Roan  says  you 
need  to  know 
three  things: 

What  is  the 
vendor’s  specif¬ 
ic  time  commit¬ 
ment  for  resolving  an  outage? 
Does  it  offer  an  automatic 
cash  or  service-credit  rebate 
after  an  outage?  And  how  fre¬ 
quently  does  it  back  up  your 
data?  She  says  you  need  to  get 
the  answers  in  writing.  If  you 
can’t,  Roan  warns,  you  should 
be  suspicious  of  the  hosted 
service’s  stability.  Needless  to 
say,  Seattle-based  Entellium 
claims  it  answers  those  ques¬ 
tions  in  its  SLA. 


ROAN 

cautions 
against  SLA 
shortfalls. 


Are  you  a  gadget  geek 
but  ashamed . . . 

...  of  admitting  it?  Maybe  you 
need  a  wardrobe  upgrade  via 
the  TEC  clothing  line  from 
ScotteVest  LLC  in  Ketchum, 
Idaho.  ScotteVest  says  its 
Milan  jacket  boasts  a  plethora 
of  hidden  pockets  to  fit  your 
“Blackberry,  iPod  and  Blue¬ 
tooth  [devices]  into  its  Razr- 
thin  patented  personal  area 
network.”  That  way,  you’ll 
always  be  connected,  but  no 
one  has  to  know  it.  Since  this 
is  Version  4.0  of  their  fetching 
fashions,  let’s  hope  they’ve 
eliminated  most  of  the  bugs.  * 


SCOTTEVEST:  Hide  your  inner  geek. 
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Fidelity  National  Aims 
To  Halt  Backup  Failures 


Replaces  older 
EMC  system  with 
new  $25M  SAN 

BY  SHARON  FISHER 

VERY  HOUR  that  Mi¬ 
chael  Amble’s  storage 
network  is  down  costs 
Fidelity  National  Fi¬ 
nancial  Inc.  almost  $4  million. 

And  that’s  just  the  direct 
cost.  The  opportunity  cost  at 
the  provider  of  real  estate  ser¬ 
vices  is  incalculable,  Amble, 
director  of  IT  at  the  Jackson¬ 
ville,  Fla.-based  company,  said 
last  week.  Fidelity  National 
Financial  insures  almost  one 
in  three  real  estate  titles  na¬ 
tionwide. 

“The  idea  of  not  having  that 
information  accessible  is  not 
an  option,”  Amble  said. 


The  company  has  just  com¬ 
pleted  an  internal  evaluation 
of  a  $25  million  storage  system 
it  began  working  on  in  2004  to 
ensure  that  its  data  is  always 
available.  Fidelity  National 
had  decided  to  replace  the 
previous  EMC  Corp.  storage 
systems  about  two  years  ago, 
after  it  had  problems  with 
backups  failing  and  forcing  re¬ 
starts,  which  ate  into  produc¬ 
tion  time,  he  said. 

The  decision  to  install  new 
systems  was  made  easier  be¬ 
cause  the  organization  faced 
a  hard  limit  with  the  EMC 
system:  Fidelity  was  at  a  point 
where  it  would  have  had  to 
spend  several  million  dollars 
on  a  new  frame  to  hold  more 
disks.  When  Amble  decided  to 
replace  the  EMC  storage,  flex¬ 
ibility  and  reliability  were  the 


most  important  considerations 
for  a  new  system,  he  said. 

Cost,  however,  was  not  a 
major  factor  in  the  search, 
Amble  said.  The  new  stor¬ 
age-area  network  cost  about 
$25  million,  a  little  more  than 
half  of  which  is  equipment 
from  Hitachi  Data  Systems 
Corp.  It  also  includes  tech¬ 
nology  from  other  vendors, 
including  IBM  and  Spectra 
Logic  Corp. 

Fidelity  is  already  saving 
money  thanks  to  a  reduction 
in  the  number  of  outages  in 
the  new  system,  Amble  said. 

The  network  uses  three 
tiers  of  storage,  with  the  most 
recently  used  data  on  more  ex¬ 
pensive  but  faster  systems. 

Tier  1  is  based  on  Hitachi’s 
TagmaStore  Universal  Storage 
Platform  USP1100,  which  of- 


Fidelity’s 

Tiered  System 


Oracle  database  With  current 
closing  properties,  on  Hitachi 
TagmaStore  Universal  Storage 
Platform  model  USP1100 


48  million  historic title  documents, 
on  Hitachi  Thunder  9585V 


Virtualized  tape  drive,  on  Hitachi 
Thunder  9585V,  which  streams 
to  a  SpectraLogic  tape  drive 


fers  150TB  of  raw  storage  and 
runs  an  Oracle  database  con¬ 
taining  information  on  current 
closing  properties. 

Tier  2  is  based  on  the  Hita¬ 
chi  Thunder  9585V  modular 
storage  system  and  holds 
about  48  million  historic  title 
documents,  which  Fidelity 
can  use  the  next  time  those 


properties  are  sold. 

Tier  3  also  runs  on  the  Hi¬ 
tachi  Thunder  9585V,  which 
is  formatted  as  a  virtual  tape 
drive.  Fidelity  streams  this 
drive  to  a  regular  Spectra  Log¬ 
ic  tape  drive,  and  the  tapes  are 
sent  off-site,  Amble  said.  The 
tapes  are  part  of  Fidelity’s  ex¬ 
tensive  disaster  recovery  plan, 
which  includes  mirrored  Tier  1 
systems  in  Chicago  and  Little 
Rock,  Ark.,  connected  with  an 
OC3  link. 

A  combination  of  Hitachi 
and  Oracle  software  replicates 
the  data  between  the  two  sites. 
Backup  tapes  are  sent  from 
Chicago  to  Little  Rock  to  the 
off-site  storage. 

“The  worst  possible  data 
loss  would  be  30  minutes,” 
Amble  said.  In  a  catastrophe 
where  both  Chicago  and  Little 
Rock  went  down,  which  he 
said  is  “really  unlikely,”  the 
company  could  re-create  its 
data  with  the  tape  backup.  * 


Fisher  is  a  special  correspon¬ 
dent  for  Computerworld. 


Senate  Bill  Seeks  to  Raise 
H-1B  Visa  Cap  to  115,000 


Would  also  affect 
green-card  laws 

BY  PATRICK  THIBODEAU 

A  wide-ranging  U.S.  Senate 
immigration  reform  bill  would 
increase  the  H-1B  visa  cap 
from  65,000  to  115,000  and 
ease  the  permanent  residency 
process  for  some  foreign  na¬ 
tionals  with  advanced  degrees. 

The  300-page  Comprehen¬ 
sive  Immigration  Reform  Act 
of  2006,  now  being  debated 
by  the  Senate  Judiciary  Com¬ 
mittee,  affects  many  aspects  of 
immigration  policy  and  secu¬ 
rity  in  addition  to  changes  in 
H-1B  and  green-card  laws. 

The  bill  could  reach  the  full 
Senate  for  a  vote  by  the  end  of 
the  month. 

If  the  measure  fails,  H-1B 
proponents  will  continue  their 
efforts  to  increase  the  cap, 
likely  by  adding  the  proposal 
to  another  bill,  said  Sandra 
Boyd,  chairwoman  of  Com¬ 
pete  America,  a  Washington- 


based  group  of  businesses,  in¬ 
dustry  groups  and  universities 
supporting  a  visa  cap  increase. 

The  group  also  supports  the 
bill’s  proposal  to  speed  up  the 
permanent  residency,  or  green 
card,  process  for  foreigners 
with  advanced  degrees.  “We 
will  continue  to  press  on  these 
issues,”  said  Boyd. 

Applications  for  H-1B  visas 
for  the  2007  federal  fiscal  year, 
which  begins  Oct.  1,  can  be 
submitted  to  the  U.S.  Bureau 
of  Citizenship  and  Immigra¬ 
tion  Services  starting  April  1. 

Last  year,  the  immigration 
bureau  cut  off  new  applica¬ 
tions  in  August  after  reaching 
the  65,000-visa  limit  for  the 
2006  fiscal  year.  That  marked 
the  earliest  date  the  cap  has 
been  reached  so  far.  Vic  Goel, 
an  immigration  attorney  based 
in  Reston,  Va.,  believes  visas 
will  disappear  at  a  similar  pace 
this  year  —  if  not  faster. 

“People  have  been  waiting 
for  the  filing  date  to  reopen,  so 
there  is  going  to  be  some  pent- 


up  demand,”  he  said. 

The  current  cap  of  65,000 
doesn’t  include  the  20,000 
H-1B  visas  that  were  issued  to 
advanced-degree  holders.  The 
Senate  bill  would  provide  for 
automatic  increases  in  subse¬ 
quent  years  once  the  proposed 
115,000  H-1B  cap  is  reached  and 
would  eliminate  any  visa  cap 
for  advanced-degree  holders. 


Any  H-1B  cap  increase  is  op¬ 
posed  by  IEEE-USA,  which  in¬ 
stead  supports  efforts  to  make 
it  easier  for  foreign  workers 
to  gain  permanent  residency. 
One  provision  in  the  legisla¬ 
tion  is  to  create  a  student  visa 
that  can  ease  the  process  of 
gaining  a  green  card. 

Ralph  Wyndrum,  president 
of  IEEE-USA,  said  his  group 


opposes  the  H-1B  visas  be¬ 
cause  they  can  be  abused  by 
employers,  who  often  treat  visa 
holders  like  indentured  ser¬ 
vants.  Such  workers  also  risk 
losing  their  employers’  support 
for  permanent  residency  if  they 
push  for  improvements,  he 
said.  Raising  the  cap  to  115,000 
would  make  “a  bad  situation 
worse,”  Wyndrum  said.  > 


IEEE-USA  Starts  Training  Institute  for  U.S.  Workers 


IEEE-USA  PUNS  to  create  an  In¬ 
novation  Institute  as  part  of  its  effort 
to  offer  advanced  training  to  U.S. 
workers. 

The  organization  hopes  that  the 
institute  will  help  U.S.  companies  re¬ 
main  competitive  with  others  around 
the  world  and  that  more  technical 
jobs  will  be  filled  by  U.S.  workers. 

IEEE-USA  represents  engineers, 
including  those  working  in  IT. 

Ralph  Wyndrum,  president  of 
IEEE-USA,  said  his  organization  will 
hold  a  workshop  for  faculty  in  July. 
The  institute  is  currently  recruiting 
technology  innovators  to  teach 
there. 


At  the  same  time,  IEEE-USA 
plans  to  ask  companies  to  nominate 
students  for  the  institute,  he  said. 

The  ideal  student,  said  Wyndrum, 
would  be  a  young  advanced-degree 
holder  who  is  already  considered 
to  be  among  the  most  prolific  of  a 
company’s  product  developers  and 
patent  holders. 

The  classes  should  include  stu¬ 
dents  who  "really  have  potential  and 
let  them  learn  from  one  another,” 
he  said. 

The  program  is  part  of  IEEE- 
USA’s  larger  effort  to  help  engineers 
maintain  relevant  skills  and  mini¬ 
mize  the  risk  of  losing  their  jobs  to 


offshore  workers,  said  Wyndrum. 

“We  are  advertising  and  making  it 
clear  that  members  are  responsible 
for  their  own  careers  and  that  they 
better  start  upgrading  themselves,” 
said  Wyndrum,  a  former  director 
of  technology  at  Bell  Laboratories, 
which  is  now  part  of  Lucent  Tech¬ 
nologies  Inc. 

IEEE-USA  began  offering  online 
courses  last  year  to  help  engineers 
upgrade  their  skills  after  many  com¬ 
panies  stopped  offering  training  for 
midcareer  employees. 

The  start  date  for  the  program 
has  not  yet  been  announced. 

-  PATRICK  THIBODEAU 
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SIP  ENERGY.  GULP  DATA. 


The  new  Sun  Fire™  servers  with  CoolThreads ™  technology. 


SERVER  FACTS:  Sun  Fire™  T2000 


IBM  X366 


6x  MORE  COMPUTE 
THREADS  PER  RACK 

2/3  THE  SIZE 

LESS  THAN  1/2  THE  POWER 
CONSUMPTION 

THE  RIGHT 
ARCHITECTURE 

ABOUT  2/3  THE  PRICE1 


65%  BETTER  PERFORMANCE 


320 

52 

2U 

3U 

550  Watts 

1,300  Watts 

ULTRASPARC'1' 

Xeon 

$8,295 

$13,252 

;  :  . 


Get  a  free  60-day  trial  now  at  sun. 


•I'  2006  Sun  Microsystems,  Inc.  Ah  rights  reserved.  IBM  x366  base  pricing  based  on  corrfiguration.wuh  1  X  Dual  Core  Xeon  3.OGH2  processor  %  8(3® 

4  x  iGb£  ports  f  2  x  PSU  /  2  x  73GB  Disks  /  /  DVD/  No  OS  /  SUSE  UNUX  Enterprise  Server  9  2-l6CPUs  &5uppon.  JBM  pricing  from  Competitive  Profiles 
(derived  fiom  IBM’s  Product  Data  sheets).  Oldest  Component  Prices  dated  October  .11,  2005)  Base -Pricing  Sun^Frre  T200C  Sjefvef  tdmqfcaiion 
1x4  Core  UltraSPARC  Tj  processor  at  1.0GHz/  8GB  Memory  /  4  x  lGb£  ports  /  2  i  PSU  /  2  x  Disks  /  Hardware  RAID  ready.  fWgV  consv(|iipti'dD'.fi%itn.-Vaj'j«3 
power  supplies.  IBM  x366  specifications  from  bHp://www-03.ibm.com/servers/eserver/xseries/x3B6.htmI  2/1 7/p^.;  breads  per  lack.'.bas^;^^ 
priced  configurations.  20  x  Sun  Fire  T2000  servers  delivering  16  threads  per  server  being  installed  Into  a  rack  with  40 SJ  oi  usable  space.  13  x,  *  * 

can  be  installed  m  an  equivalent  rack  with  each  server  configured  with  2  x  Xeon  cores,  each  tare  delivering  ?  tr. 
on  estimated  relative  performance.  .  '  y  :  ”,  ■■ 

U.S.  list  price.  Alt  prices  are  in  U.S.  dollars.  ;  ,  .  >n( 

Some  restrictions  apply.  See  sun.com  for  details!  -  'V-  ■  '  ■ity*----* 
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GM  Worker  Charged 
In  Data  Theft 

A  former  security  guard  at  a 
General  Motors  Corp.’s  technical 
center  has  been  charged  with 
stealing  documents  containing 
the  names  and  Social  Secu¬ 
rity  numbers  of  about  100  GM 
employees.  The  ex-employee, 
James  S.  Green  of  Washington 
Township,  Mich.,  is  charged  with 
eight  counts  of  obtaining,  pos¬ 
sessing  or  transferring  personal 
identity  information  and  one 
count  of  using  a  computer  to 
commit  a  crime. 


Adobe  Discloses 
Flash  Vulnerability 

Adobe  Systems  Inc.  has  patched 
several  critical  vulnerabilities  in 
its  Flash  media  player  that  could 
be  used  by  attackers  to  take  over 
an  affected  system.  Microsoft 
Corp.,  which  distributes  the 
Flash  software  with  its  Windows 
operating  system,  also  warned 
customers  about  the  bugs.  The 
vulnerabilities  can  be  found  in 
Flash  Player,  Breeze  Meeting 
and  Shockwave. 


Red  Hat  Outlines 
Virtualization  Plans 

Red  Hat  Inc.  plans  to  integrate 
Xen  virtualization  technologies 
into  the  next  version  of  its  Linux 
operating  system.  The  firm  said 
it  will  provide  a  preview  of  the 
technologies  in  Fedora  Core  5, 
slated  to  ship  by  the  end  of  this 
month.  The  technology  will  be 
included  in  Version  5  of  Red  Hat 
Enterprise  Linux  later  this  year. 


Sun  Sued  After 
Threats  Against  Firm 

Azu!  Systems  Inc.  has  sued  Sun 
Microsystems  Inc.  as  a  defensive 
move  against  what  Azul  called 
litigation  threats  and  unfounded 
accusations  from  the  larger  IT 
vendor.  Azul  said  it  is  seeking 
declaratory  relief  in  the  lawsuit, 
filed  in  U.S.  District  Court  for  the 
Northern  District  of  California. 
Azul  said  Sun  has  threatened  to 
sue  it  for  patent  infringement 
and  misappropriation  of  trade 
secrets.  Azul  calls  those  charges 
unfounded. 
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Sun  CIO  Pushes  Internal 
Grid,  ERP  Consolidation 


Works  with  ‘really 
lean’  IT  budget 

BY  ERIC  LAI 

You  might  expect  Bill  Vass  of 
Sun  Microsystems  Inc.  to  enjoy 
a  lavish  budget  as  the 
CIO  of  a  major  Silicon 
Valley  technology  vendor. 

In  fact,  Vass,  who  joined 
Sun  in  2000  and  was 
promoted  to  CIO  last 
year,  expects  to  spend 
about  $300  million  on 
internal  IT  during  the 
company’s  current  fiscal 
year.  That  amounts  to 
only  about  2%  of  Sun’s  expected 
annual  revenue.  Vass  spoke 
with  Computerworld  last  week 
about  IT  issues  inside  Sun. 

What’s  on  your  internal  IT  agenda 
this  year?  We  have  two  big 
projects.  For  the  first  one, 
imagine  a  grid  that  delivers 
traditional  high-performance 
computing  that  people  are 


used  to,  along  with  stateful 
computing  a  la  ERP,  along 
with  desktops  being  imaged 
out  to  thin-client  computers, 
all  in  the  same  architecture. 

We  have  more  than  42,000 
desktops.  With  desktops,  most 
of  the  time  you’re  not 
using  your  CPU  cycles. 
So  we’re  taking  those 
CPUs  and  putting 
them  back  into  the  grid. 
We’re  probably  the  first 
to  attempt  to  do  this 
with  our  desktops. 

For  things  like  big 
table  joins  in  a  database, 
we  move  that  to  big 
[symmetrical  multiprocessing] 
boxes.  Anything  that  requires 
very  high  performance,  we 
move  to  our  Opteron  [server] 
environment.  If  we  set  up  the 
grid  properly,  we’ll  have  a  data 
center  in  the  future  that  will 
always  be  80%  to  90%  utilized, 
versus  10%  to  20%. 

Our  other  big  project  is 
related  to  our  recent  acquisi¬ 


tions.  We  currently  are  run¬ 
ning  three  ERP  systems:  Ora¬ 
cle,  SAP  via  our  acquisition  of 
StorageTek  last  year,  and  Onyx 
from  another  acquisition.  My 
goal  is  to  consolidate  them 
into  a  single  Oracle  “vanilla” 
instance. 

Did  you  consider  going  with  SAP 
instead  of  Oracle?  We  did  do  a 

bake-off  between  Oracle  and 
SAP.  We  chose  Oracle  because 
their  business  processes  were 
very  close  to  ours;  they  now 
own  Siebel,  which  we  also  use, 
and  they  have  good  support 
for  x86  Solaris.  SAP  has  a  very 
clean  multitiered  architecture 
and  is  database-independent, 
which  we  liked.  But  SAP  was 
not  quite  as  ready  to  go  on  the 
grid  as  Oracle  was. 

Before  joining  Sun,  you  worked  in 
IT  at  the  Department  of  Defense. 
How  is  working  at  Sun  different 
from  working  for  the  military?  At 

the  DOD,  there  were  16  million 


users.  I  was  one  of  70  CIOs 
across  the  DOD,  which  had 
more  than  300,000  IT  em¬ 
ployees.  There’s  no  corpora¬ 
tion  in  the  world  that  is  even 
close.  Our  IT  annual  budget 
was  about  9%,  or  more  than 
$30  billion,  of  the  DOD’s  total 
budget.  A  lot  of  money  is  spent 
on  life-critical  systems.  If  a 
ballistic  missile  system  goes 
down,  people  can  die.  That’s 
a  much  higher  bar  than  what 
we  think  of  as  mission-critical, 
like  keeping  eBay  from  going 
down  for  several  hours. 

How  has  Sun’s  IT  organization 
changed  in  six  years?  When 

I  first  got  here,  we  had  nine 
business  units  [in  IT],  each  of 
which  operated  independently 
in  one  of  three  geographic 
regions.  We  effectively  had  27 
CIOs.  We  don’t  have  that  to¬ 
day.  Also,  there  were  3,000  IT 
people.  Today,  there  are  800. 
We’ve  done  a  lot  of  outsourc¬ 
ing  and  consolidation.  We  also 
supported  1,200  applications 
[then].  I  helped  cut  that  down 
to  500,  though  with  our  recent 
StorageTek  acquisition,  we  are 
back  up  to  1,000. 

My  budget,  for  an  IT  com¬ 
pany,  is  really  lean.  * 


Sun  Retail  Grid  Set  to  Open  for  Business 


BY  PATRICK  THIBODEAU 

After  a  series  of  delays  over 
the  past  year,  Sun  Microsys¬ 
tems  Inc.  on  Wednesday  will 
open  the  retail  version  of  its 
compute  grid. 

The  Sun  Grid  will  supply 
processing  and  storage  capa¬ 
bilities  through  a  Web  portal 
for  $1  per  hour  per  CPU  to 
individual  and  corporate  users, 
who  can  pay  by  credit  card. 

The  grid  has  been  avail¬ 
able  since  last  August  to  large 
companies  that  contract  for 
significant  use  of  the  system. 
The  retail  version  is  open  to  all 
potential  users,  Sun  said. 

Aisling  MacRunnels,  Sun’s 
director  of  utility  computing, 
described  the  Sun  Grid  portal 
as  a  “full  open  pilot”  whose 
typical  users  will  likely  be  in¬ 
dividual  scientists,  engineers 
or  developers  “looking  to  just 
get  their  work  done.” 


Such  high-performance 
computing  users  are  the  pri¬ 
mary  target  for  the  grid,  she 
said.  To  a  lesser  extent,  Sun 
is  also  aiming  the  grid  at  in¬ 
dependent  software  vendors 
looking  to  use  it  to  deliver 
software  as  a  service,  she  said. 

The  Sun  Grid  runs  on  Op- 
teron-based  systems  running 
the  Solaris  10  operating  system. 
Sun  expects  clients  to  use  the 
grid  to  run  [ava-  and  C++-based 
software  that  can  take  advan¬ 
tage  of  a  grid  environment. 

Sun  isn’t  disclosing  the 
number  of  CPUs  available  to 
users  of  the  service,  other  than 
to  say  it’s  in  the  thousands. 

The  largest  commercial 
Sun  Grid  user  so  far  is  Virtual 
Compute  Corp.,  a  Cypress, 
Texas-based  firm  that  provides 
high-performance  computing 
services. 

CEO  Edward  Hayes  said 


the  company  bought  more 
than  1  million  hours  of  com¬ 
pute  time  last  fall  and  has 
recently  been  running  a  cus¬ 
tomer’s  seismic  survey  data 
to  create  a  3-D  rendering  of 
what’s  underground. 

Sun  intended  to  launch  the 
public  grid  early  last  year,  but 
it  faced  delays,  including  U.S. 
State  Department  concerns 
about  making  such  massive 
compute  resources  widely 
available. 

Because  the  compute  power 
of  a  grid  could  be  used  for 
malicious  activities,  the  U.S. 
is  requiring  that  its  users  be 
checked  against  restricted- 
persons  lists  used  to  identify 
people  who  may  pose  a  threat. 

Under  the  pricing  schedule, 
using  100  CPUs  for  an  hour 
would  cost  a  user  $100. 

John  Madden,  an  analyst  at 
Boston-based  Summit  Strate- 


Sun  Grid 


■  RETAIL  VERSION:  Avail 
able  Wednesday,  offering  users 
access  to  Sun  Grid  via  a  Web 
portal  for  $1  per  CPU  per  hour. 
Payments  can  be  made  using 
PayPal  or  a  credit  card. 

■  COMMERCIAL  VERSION: 

Available  to  corporate  users 
since  August  2005.  A  purchase 
order  can  be  used  to  reserve 
resources.  Standard  payment  is 
same  as  for  retail,  but  large-user 
discounts  are  available. 

■  TYPICAL  USERS:  For 

high-performance  computing, 
life  sciences,  oil  and  gas,  and 
government  applications.  Sun 
is  also  targeting  vendors  that 
need  compute  resources  for 
software-as-a-service  offerings. 


gies  Inc.,  said  the  retail  version 
of  the  site  could  give  Sun  the 
“proof  points”  to  convince  large 
business  customers  that  use  of 
the  grid  is  straightforward.  * 
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China’s  New  Five-Year 
Plan  Sets  Tech  Goals 

BEIJING 

HINA’S  Ministry  of  Information 
Industry  (Mil)  is  starting  to  work 
to  achieve  the  IT  goals  set  out  in 
the  country’s  11th  five-year  plan,  which 
was  approved  last  week  by  the  National 
People’s  Congress. 

Five-year  plans,  a  legacy  of  the  days 
when  China  was  a  purely  centralized 
society,  outline  the  government’s  eco¬ 
nomic  and  social  development  policy 
goals.  The  new  plan  covers  the  period 
from  this  year  through  2010. 

The  high-tech  objectives  in  the  plan 
include  developing  semiconductor 
manufacturing  technology  for  ad¬ 
vanced  systems,  building  high- 
performance  comput¬ 
ing  systems  and  de¬ 
ploying  a  nationwide 
digital  TV  network. 

The  Mil  said  that  this 
year,  it  will  increase 
funding  for  the  Chinese 
semiconductor  industry 
and  promote  further 
development  of  Linux 
and  applications  based 
on  the  open-source  op¬ 
erating  system. 


The  ministry  also  plans  to  provide 
more  funding  for  development  and 
deployment  of  advanced  wireless  tech¬ 
nologies  such  as  wireless  broadband 
networks. 

■  SUMNER  LEMON,  ID6  NEWS  SERVICE 


Design  Firm  Charged 
With  Pirating  Software 

SINGAPORE 

HE  SINGAPORE  Police  Force  has 
charged  PDM  International  Pte. 
Ltd.,  an  interior  design  company, 
with  using  51  copies  of  pirated  software 
from  Adobe  Systems  Inc.,  Autodesk 
Inc.  and  Microsoft  Corp.  “to  obtain  a 
commercial  advantage.” 

PDM  is  the  first  company  in  Singa¬ 
pore  to  be  charged  with  using  unli¬ 
censed  software  since 
the  country’s  Copy¬ 
right  Act  was  amended 
at  the  start  of  last  year 
to  make  large-scale 
copyright  infringement 
by  businesses  a  crimi¬ 
nal  offense. 

The  company  faces 
fines  of  up  to  20,000 
Singapore  dollars 
($12,356  U.S.).  A  recep¬ 
tionist  who  answered 


the  phone  at  PDM  last  week  said  the 
company  wouldn’t  comment  about  the 
piracy  charges. 

■  SUMNER  LEMON,  ID6  NEWS  SERVICE 


Philippine  Government 
Builds  Agency  Portal 

MANILA 

HE  NATIONAL  Department  of  Sci¬ 
ence  and  Technology  (DOST)  in 
the  Philippines  has  launched  a 
Web  portal  that  it  hopes  will  eventu¬ 
ally  integrate  the  databases  of  various 
government  agencies  as  well  as  those 
of  public  and  privately  run  research 
institutions. 

The  portal,  located  at  www.science. 
ph,  initially  provides  links  to  about  65 
databases  belonging  to  agencies  within 
the  DOST,  including  the  Technology 
Application  and  Promotions  Institute 
and  the  Philippine  Council  for  Ad¬ 
vanced  Science  and  Technology  Re¬ 
search  and  Development. 

DOST  officials  said  the  portal  uses 
Web  services  and  Java  technology  to 
link  open-source  and  proprietary  data¬ 
bases.  Users  can  run  queries  against  in¬ 
dividual  databases.  Future  versions  of 
the  portal  will  add  advanced  research 
capabilities  and  an  e-commerce  tool 
that  can  integrate  payments  for  sub¬ 
scriptions  to  multiple  databases.  * 

■  LAWRENCE  D.  CASIRAYA, 
C0MPUTERW0RLD  PHILIPPINES 


Compiled  by  Mike  Bucken. 


Briefly  Noted 

Equant  NV,  an  Amsterdam-based 
subsidiary  of  France  Telecom  SA, 
has  signed  outsourcing  contracts 
with  Universal  Music  Group  and 
Getinge  AB.  Equant  said  its  five-year 
deal  with  UMG  covers  the  New  York- 
based  company’s  communications 
infrastructure.  The  seven-year  con¬ 
tract  with  Sweden-based  Getinge 
covers  data  management,  fixed  and 
mobile  voice  services,  hosting  and 
end-user  support.  Equant  didn’t  dis¬ 
close  the  value  of  either  deal. 

Hitachi  Ltd.  last  week  named 
Etsuhiko  Shoyama,  currently  its 
president  and  CEO,  as  chairman, 
effective  April  t.  Tokyo-based 
Hitachi  named  Kazuo  Furukawa,  an 
executive  vice  president  in  charge 
of  its  systems  business,  to  replace 
Shoyama  as  president. 

■  STEVEN  SCHWANKERT, 

ID6  NEWS  SERVICE 

Research  In  Motion  Ltd.  confirmed 
last  week  that  it  is  in  talks  with 
Beijing-based  China  Mobile  Commu¬ 
nications  Corp.  about  launching  its 
BlackBerry  wireless  e-mail  service 
in  China.  No  timetable  has  been  set 
for  the  launch,  said  RIM,  which  al¬ 
ready  offers  the  BlackBerry  service 
in  Hong  Kong. 

■  SUMNER  LEMON,  IDG  NEWS  SERVICE 


GLOBAL  FACT 


The  average  annual  value  of 
1,091  IT  services  contracts 
signed  in  the  Asia-Pacific 
egion  from  1999  through  Iasi 
year.  The  average  contract 
length  was  4.6  years. 
SOURCE:  GARTNER  INC. 


Amazon.com  Unveils  Data  Storage  Service 


Online  retailer  looks  to  leverage  IT 
infrastructure  to  expand  business 


BY  TODD  R.  WEISS 

With  its  e-business  creden¬ 
tials  firmly  established,  online 
retailer  Amazon.com  Inc.  last 
week  unveiled  a  new  service 
through  which  it  leverages 
its  massive  IT  infrastructure 
by  leasing  storage  capacity  to 
independent  and  corporate 
software  developers. 

The  Seattle-based  compa¬ 
ny’s  Web  services  division  un¬ 
veiled  the  Amazon  S3  service 
to  sell  excess  storage  capacity 
on  Amazon’s  IT  systems  for  15 
cents  per  gigabyte  per  month 
for  storage,  plus  20  cents  per 
gigabyte  for  data  transfer. 

The  Stardust@home  space 
science  project  at  the  Univer¬ 
sity  of  California,  Berkeley,  a 


test  site  for  Amazon  S3,  is  us¬ 
ing  the  service  to  store  some 
60  million  photographs  of  in¬ 
terstellar  space  dust  collected 
by  NASA’s  Stardust  space 
probes. 

Bryan  Mendez,  an  astrono¬ 
mer  at  Berkeley,  said  proj¬ 
ect  officials  decided  to  use 
Amazon  S3  a  few  months  ago 
because  it  would  have  been 
too  expensive  to  purchase 
short-term  storage  just  for  the 
experiment.  “It  would  be  more 
than  we  need  for  this  one-time 
shot,”  Mendez  said. 

The  millions  of  photographs 
are  nearly  ready  for  a  review 
by  volunteers  looking  for 
visible  “tracks”  of  particles 
collected  by  the  probe  before 


the  images  are  passed  on  to 
scientists. 

Analysts  were  unsure  about 
whether  Amazon.com’s  ser¬ 
vice  can  be  successful. 

It’s  a  “ploy”  aimed  at  small 
and  midsize  businesses  (SMB) 
that  won’t  likely  appeal  to 
large  organizations,  said  Chris 
Foster,  a  storage  analyst  at 
Technology  Business  Research 
Inc.  in  Hampton,  N.H.  “Even 
if  I’m  an  SMB,  I  don’t  know 
if  I  want  to  start  storing  stuff 
outside  [my  own  network], 
particularly  customer  data.” 

Foster  also  noted  that  there 
are  plenty  of  established  ven¬ 
dors  offering  such  services. 

“I’d  rather  go  to  someone 
whose  core  competency  is 
managing  or  storing  data,” 
Foster  said. 

Ronald  Schmelzer,  an 
analyst  at  ZapThink  LLC  in 


Amazon  S3 

Storage  service  features 

■  SCALABLITY:  Amazon  L 
support  an  unlimited  numbc 
scale  applications. 

■  RELIABILITY:  It  can  ston 


■  PERFORMANCE: 


Baltimore,  said  that  Amazon 
is  trying  to  position  itself  as 
a  technology  platform,  rather 
than  as  just  an  e-commerce 
site.  “It’s  a  stretch  of  the  busi¬ 
ness  plan,”  Schmelzer  said. 

Amazon  created  its  Web 
services  division  in  July  2002 
to  encourage  software  devel¬ 
opers  to  create  and  offer  cus¬ 


tom  applications  to  Amazon.¬ 
com  sellers.  The  sellers  then 
pay  to  use  the  applications, 
including  specialized  inven¬ 
tory  and  tracking  software,  to 
customize  their  online  stores. 

The  unit  has  signed  up  more 
than  150,000  registered  devel¬ 
opers  since  its  creation. 

The  Secure  S3  service  is 
now  available  to  any  devel¬ 
oper,  from  college  students  to 
entrepreneurs  and  enterprise 
developers,  with  no  start-up  or 
monthly  maintenance  fees. 

Amazon  S3  allows  develop¬ 
ers  to  write,  read  and  delete 
objects  up  to  5GB  in  size, 
with  each  object  stored  and 
retrieved  via  a  developer- 
assigned  key,  the  company 
said. 

The  service  uses  standards- 
based  Rest  and  SOAP  inter¬ 
faces  designed  to  work  with 
any  Internet  development  tool 
kit,  according  to  Amazon.  > 


73%  of  the  FORTUNE  100®  and  76% 
of  the  European  100  compared  business 
collaboration  providers  and  came  to 
a  single  conclusion. 


Obviously,  great 
minds  think  alike. 
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At  Opposite  Ends 


The  high  and  low  scorers  on 
the  U.S.  government’s  secu¬ 
rity  report  card  for  2005: 


© 


G 


■  Agency  for 
International 
Development 


■  Department  of  Labor 

■  Environmental 
Protection  Agency 

■  Office  of  Personnel 
Management 

■  Social  Security 
Administration 


■  Department  of 
Agriculture 


Department  of  Defense 

■  Department  of  Energy 

■  Department  of  Health 
and  Human  Services 

■  Department  of 
Homeland  Security 

■  Department  of  the  Interior 

■  Department  of  State 

■  Department  of 
Veterans  Affairs 


SOURCE:  HOUSE  COMMITTEE  ON  GOVERNMENT  REFORM 


Continued  from  page  1 

Fed  Grades 

signed  into  law  in  2002. 

Karen  Evans,  administra¬ 
tor  of  e-government  and  IT 
within  the  White  House’s 
Office  of  Management 
and  Budget,  agreed  with 
Charbo  and  Lentz  that 
large  agencies  can  have 
a  tougher  time  comply¬ 
ing  with  FISMA  than 
smaller  ones. 

Rep.  William  Lacy 
Clay  (D-Mo.),  another 
member  of  the  reform 
committee,  was  un¬ 
moved.  “It  sounds  as  if 
you  are  defending  the 
incompetency  of  DHS,” 
he  told  Evans. 

But  Rep.  Tom  Davis  (R-Va.), 
the  committee’s  chairman, 
showed  some  sympathy  for 
agencies  such  as  the  DHS  and 
DOD.  For  example,  he  noted 
that  the  DHS  brought  together 
more  than  20  federal  agencies 
when  it  was  formed  in  2003. 
“This  is  a  work  in  progress,” 
he  said  of  efforts  by  the  DHS 
to  bring  all  of  its  systems  into 
compliance  with  FISMA’s 


WASHINGTON 

EVEN  THOUGH  the  DHS  and  the 
DOD  both  received  Fs  on  computer 
security  for  2005  from  the  House 
Committee  on  Government  Reform, 
the  IT  executives  who  testified  at 
last  week’s  hearing  said  the  two 
agencies  have  made  major  security 
improvements  in  recent  months. 

Robert  Lentz,  director  of  informa¬ 
tion  assurance  at  the  DOD,  said 
the  Pentagon  has  begun  a  process 
to  track  IT  security  personnel  and 
security  certifications.  It  also  has 
conducted  cybersecurity  training  for 
2  million  of  the  2.6  million  military, 
civilian  and  contract  workers  within 
the  DOD  who  have  access  to  its 
networks. 

The  DHS,  which  began  operat¬ 
ing  as  a  combined  agency  in  early 
2003,  completed  an  inventory  of  its 
systems  and  applications  last  Au¬ 
gust,  CIO  Scott  Charbo  said.  Earlier, 
in  April,  the  agency  had  rolled  out  a 
systems  certification  and  accredi- 


requirements.  “This  takes 
years.” 

Some  analysts  questioned 
the  effectiveness  of  the  en¬ 
tire  FISMA  process,  saying 
that  the  assessments  don’t 
provide  a  true  picture  of  the 
IT  security  capabilities  at  fed¬ 
eral  agencies  and  don’t 
do  much  to  promote 
improvements  in  the 
government’s  security 
mechanisms. 

FISMA  requires 
agencies  to  prepare  IT 
inventories,  test  their 
systems  for  security 
vulnerabilities  and  de¬ 
velop  remediation  plans 
in  case  systems  are  af¬ 
fected  by  major  attacks 
or  outages.  Reports  pre¬ 
pared  by  agency  CIOs  and  in¬ 
spector  generals  are  designed 
to  gauge  whether  the  depart¬ 
ments  meet  FISMA’s  security 
standards. 

But  rather  than  focus¬ 
ing  on  FISMA,  the  govern¬ 
ment  should  adopt  security 
scorecards  that  measure  the 
real-world  “readiness”  of  its 
computer  systems,  much  like 
the  military  reports  on  the 
battle-readiness  of  its  weapons 


HWe  also 
recognize 
that  FISMA 
compliance  is  just 
one  mechanism 
for  security  analy¬ 
sis  and  reporting. 

THOMAS  HUGHES,  CIO, 

U.S.  SOCIAL  SECURITY 
ADMINISTRATION 

tation  tool,  according  to  Charbo. 
About  26%  of  its  IT  equipment  was 
accredited  as  of  late  2005,  and  that 
number  is  now  up  to  60%,  he  said. 

Thomas  Hughes,  CIO  at  the 
Social  Security  Administration,  also 
testified  at  last  week’s  hearing.  So¬ 
cial  Security  was  one  of  five  agen¬ 
cies  that  received  an  A+  grade  for 
2005  from  the  reform  committee. 

As  part  of  complying  with  the  Feder- 


systems,  said  Alan  Paller,  di¬ 
rector  of  research  at  the  SANS 
Institute  in  Bethesda,  Md. 

The  security  certification 
and  accreditation  reports 
required  under  FISMA  “are 
90%  documentation,”  Paller 
said.  “The  consultants  that 
write  these  reports  have  never 
secured  a  computer  system. 
They  wouldn’t  know  a  secure 
system  if  they  met  it  on  the 
street.” 

Input,  a  Reston,  Va.-based 
market  research  firm  that 
focuses  on  government  IT  is¬ 
sues,  said  in  a  report  released 
last  week  that  FISMA  “can  be 
assessed  as  largely  ineffective” 
in  improving  the  IT  security 
posture  of  federal  agencies. 

“FISMA  has  become  a 
largely  paperwork  drill  among 
the  departments  and  agen¬ 
cies,  consuming  an  inordinate 
amount  of  resources  for  re¬ 
porting  progress  while  putting 
in  place  very  little  in  the  way 
of  actual  security  improve¬ 
ments,”  Input  analyst  Bruce 
Brody  said  in  a  statement. 

Brody  added  that  FISMA’s 
focus  on  individual  systems 
and  sites  “does  not  recognize 
the  importance  of  backbone 


al  Information  Security  Management 
Act,  agencies  “need  to  constantly 
challenge  the  traditional  status  quo,” 
Hughes  said. 

Social  Security  takes  its  FISMA 
compliance  responsibilities  "very  se¬ 
riously,”  he  said.  But,  Hughes  added, 
“we  also  recognize  that  FISMA  com¬ 
pliance  is  just  one  mechanism  for 
security  analysis  and  reporting."  Ad¬ 
ditional  evaluations  are  also  critical 
to  the  agency’s  efforts  to  maintain 
effective  IT  security,  he  said. 

Thomas  Wiesner,  deputy  CIO  at 
the  U.S.  Department  of  Labor,  noted 
that  his  agency’s  security  grade 
has  improved  from  an  F  for  2001 
to  a  B-  for  2004  and  now  an  A+  for 
last  year.  “As  we  are  faced  with  the 
evolution  of  FISMA  compliance," 
Wiesner  said,  “we  will  strive  to 
maintain  a  balance  of  FISMA  report¬ 
ing  requirements  and  the  implemen¬ 
tation  of  sound  security  practices." 

-GRANT  GROSS, 
IDG  NEWS  SERVICE 


infrastructure  security  im¬ 
provements.” 

On  the  latest  report  card, 
eight  of  the  24  agencies  that 
were  evaluated  received  F 
grades  for  2005.  In  addition  to 
the  DHS  and  the  DOD,  agen¬ 
cies  getting  Fs  included  the 
departments  of  State, 

Energy,  the  Interior, 
Agriculture,  Veterans 
Affairs,  and  Health  and 
Human  Services.  The 
DOD’s  grade  declined 
from  a  D  in  2004,  while 
the  Department  of  the 
Interior  dropped  down 
from  a  C+  and  the  State 
Department  fell  from 
a  D+. 

Other  agencies  that  saw  their 
2005  grades  drop  from  those 
given  for  the  previous  year 
included  the  Department  of 
Transportation,  which  fell  from 
an  A-  to  a  C-;  the  Department 
of  Justice,  which  went  from  a 
B-  to  a  D;  and  the  Nuclear  Reg¬ 
ulatory  Commission,  which 
slipped  from  a  B+  to  a  D-. 

Seven  agencies  received 
grades  of  A-  or  better,  with  the 
Department  of  Labor,  the  So¬ 
cial  Security  Administration 
and  the  Environmental  Pro¬ 
tection  Agency  among  the  five 
that  were  given  A+  grades. 

Big  gains  were  recorded  by 
the  Office  of  Personnel  Man¬ 
agement,  which  saw  its  grade 
improve  from  a  C-  to  an  A+, 
and  by  the  National  Science 
Foundation  and  the  Gen¬ 
eral  Services  Administration, 


which  went  from  C+  grades  to 
an  A  and  an  A-,  respectively. 

In  addition,  NASA’s  grade  rose 
from  a  D-  for  2004  to  a  B-  for 
last  year. 

Davis  said  that  improving 
cybersecurity  at  the  agen¬ 
cies  still  struggling  to  get 

better  grades  is  “vital” 
to  national  security 
and  the  health  of  the 
U.S.  economy.  “None 
of  us  would  accept  D+ 
grades  on  our  chil¬ 
dren’s  report  cards,”  he 
noted.  “We  can’t  accept 
these,  either.” 

Charbo  said  the  IT 
security  program  at  the 
DEIS  “has  come  a  long 
way  in  just  three  short  years.” 
But  he  agreed  with  Davis 
that  the  DHS  needs  to  do  bet¬ 
ter.  The  sprawling  agency’s 
size  and  complexity  “doesn’t 
change  the  fact  that . . .  we’re 
nowhere  near  where  we  want¬ 
ed  to  be,”  Charbo  said.  » 


Gross  and  McMillan  write  for 
the  IDG  News  Service. 

Correction 

In  last  week’s  issue,  the  integra¬ 
tor  in  a  project  to  add  IP-based 
communications  capabilities  to 
an  emergency  vehicle  in  Anne 
Arundel  County,  Md„  (“Disasters 
Proving  Mettle  of  IP  Communica¬ 
tions")  was  incorrectly  identified. 
Arinc  Inc.  in  Annapolis,  Md.,  was 
the  integrator  for  the  project. 
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CA  Integrates  Desktop,  Server  Management  Tools 


BY  MATT  HAMBLEN 

CA  Inc.  today  plans  to  unveil 
the  CA  Desktop  and  Server 
Management  family,  which 
integrates  three  existing  tools 
that  offer  software  delivery, 
remote-control  and  asset  man¬ 
agement  functions. 

At  the  same  time,  CA  is 
bringing  out  two  new  tools 
that  can  be  included  in  the 
integrated  offering:  the  CA 
Desktop  Management  Suite 
for  Windows,  which  manages 
PCs  throughout  their  life  cycle, 
and  Unicenter  Patch  Manage¬ 
ment,  which  manages  the 
desktop  and  server  software- 
patch  function. 

Each  of  the  tools  in  the 
integrated  system,  including 
the  new  offerings  —  Unicenter 
Asset  Management,  Unicenter 
Software  Delivery  and  Uni¬ 
center  Remote  Control  — 
continue  to  be  available  sepa¬ 
rately.  The  full  suite  is  now 
available. 

Time-saver 

Jason  Bullock,  systems  admin¬ 
istrator  at  Colorado  Springs 
School  District  11,  a  beta  tester 
of  the  integrated  software 
since  October,  uses  the  suite’s 
single  management  console 
to  monitor  software  delivery, 
asset  management  and  remote 
control  of  machines. 

Bullock  noted  that  one 
unexpected  benefit  of  the  up¬ 
dated  system  is  its  support  for 
older  Windows  95  machines, 
of  which  the  district  still  has 
4,000. 

The  automated  update 
feature  also  cut  the  school 
district’s  costs  by  reducing  the 
travel  time  of  15  IT  workers 
who  shared  the  job  of  deliver¬ 
ing  updates  to  the  schools, 
Bullock  said. 

“It  makes  my  job  a  lot  easier 
and  has  saved  us  all  hours  of 
work,”  he  said. 

In  all,  there  are  about  10,000 
PCs  and  servers  in  the  district, 
which  has  4,000  school  admin¬ 
istrators  and  33,000  students 
in  60  locations,  Bullock  said. 

Integrating  the  software 
agent  functions  into  a  single 
agent  is  a  “huge  benefit,”  said 
Harry  Butler,  support  center 
manager  at  EFW  Inc.,  an  elec¬ 


tronics  supplier  in  Fort  Worth, 
Texas.  Having  multiple  agents 
running  on  hundreds  of  ma¬ 
chines  was  a  “pain  in  the  butt,” 
Butler  said. 


EFW  has  been  testing  CA’s 
Desktop  and  Server  Manage¬ 
ment  tools  since  November  on 
about  1,400  laptops,  servers 
and  desktops. 


Some  EFW  IT  workers  have 
grown  concerned  that  the  CA 
software  may  jeopardize  their 
jobs,  but  Bullock  said  they 
have  been  reassured  that  they 
will  continue  to  be  responsible 
for  administering  the  software, 


among  other  job  functions. 

CA’s  integration  of  manage¬ 
ment  functions  is  what  makes 
the  new  release  important, 
said  Andi  Mann,  an  analyst  at 
Enterprise  Management  Asso¬ 
ciates  in  Boulder,  Colo.  * 
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Delayed  Visual  Studio  Tool  Ready 
To  Ship,  Says  Microsoft  Executive 


Collaboration  tool  set  promises  to  ease 
the  tension  between  IT  and  business 


BY  HEATHER  HAVENSTEIN 

Microsoft  Corp.’s  Team  Foun¬ 
dation  Server  (TFS),  a  key 
component  of  Visual  Studio 
2005  Team  System  (VSTS)  was 
scheduled  to  begin  shipping  last 
week,  after  a  delay  of  more  than 
four  months.  In  a  recent  inter¬ 
view  with  Computerworld,  Rick 
LaPlante,  Microsoft’s  general 
manager  of  VSTS,  discussed 
the  new  collaboration  product, 
which  is  a  server-based  system 
that  supports  integrated  version 
control,  reporting,  work  item 
tracking,  process  guidance  and 
automated  build  capabilities. 


How  is  the  new  tool  attractive  to 
IT  managers?  I  spent  the  last 
five  years  with  more  than  200 
customers,  CIOs  and  senior 
application  development  and 
IT  management  staffers  try¬ 
ing  to  understand  what  their 
pain  points  are.  I  heard  over 
and  over  again  . . .  this  view  of 
[IT]  not  being  responsive  to 
the  business  because  we  look 
at  big  projects  that  take  long 
periods  of  time. 

[The  goal  of  TFS  is]  to  put 
all  the  value  of  data  collection 
behind  the  scenes.  That  notion 
of  having  a  data  warehouse 


and  then  having  a  set  of  “col¬ 
lectors”  that . . .  squirrel  away 
data  was  a  huge  piece  of  this. 

I  think  about  Team 
Foundation  Server  as 
being  the  data  ware¬ 
house  and  the  role- 
based  [components  of 
VSTS]  as  being  those 
collectors. 

Does  Microsoft  still  expect 
that  TFS  will  support  hun¬ 
dreds  or  even  thousands 
of  users?  It  is  hard  to 
talk  about  scale  numbers  with 
out  talking  about  hardware. 
We’re  seeing  on  a  big  box  — 
like  an  eight-way  box  —  peak 
loads  of  over  3,600  [users] 
on  a  single  server.  I  think  that 


is  quite  conservative. 

We  took  the  load  profile  of 
Microsoft’s  engineering  teams 
and  recorded  the  way  we  used 
the  server.  If  those  [users] 
don’t  use  it  as  hard-core  as 
our  developers  do,  then  those 
numbers  will  go  up.  Internally, 
we  are  up  to  about  700 
5  people  on  a  single 
|  server. 

How  does  TFS  work  with 
Microsoft  Project  now, 
and  what  are  the  plans  to 
strengthen  the  integration 
in  the  future?  Today,  the 
real  chasm  is  develop¬ 
ers  having  to  do  things 
twice.  They  go  imple¬ 
ment  the  functionality,  and 
they  check  it  in  and  mark  it  off. 
Then  they  have  to  go  to  the 
Project  system  and  say,  “I  am 
done.”  We  allow  you  to  retain 
the  relationship  between  an  el¬ 


ement  in  Project  and  anything 
in  our  work-tracking  system. 
Any  change  in  the  [TFS]  work¬ 
tracking  system  is  immedi¬ 
ately  reflected  in  Project.  We 
don’t  work  today  with  Project 
server  out  of  the  box,  although 
we  have  some  solution  kits  you 
can  download.  Our  commit¬ 
ment  is  [to  develop]  a  much 
deeper  level  of  integration. 

What  does  the  growth  of  Eclipse 
mean  to  the  integrated  develop¬ 
ment  environment  market  and  to 
Visual  Studio?  I  think  people 
are  using  Eclipse  because  it 
is  a  very  good  IDE,  and  it  is 
decreasing  their  costs  for  de¬ 
veloping  software.  Their  user 
experience  and  component 
model  are  very  good.  I  also 
think  it  is  a  complete  knockoff 
of  Visual  Studio.  People  do 
plug-ins  to  VS  because  it  is  a 
built-in  market.  ► 
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WHAT  would  the  IT  industry  be  like 

without  the  entrenched  institution  of 
political  lobbying?  How  much  more 
worthy  of  our  trust  would  it  be? 

I  find  I’ve  been  wondering  about 
that  a  lot  lately,  especially  since  I  have  very  little  pa¬ 
tience  for  the  practice  of  lobbying  in  the  first  place. 


There  just  seems  to  be 
something  inherently  un¬ 
healthy  about  any  system 
that  rewards  deep  pockets 
with  influence  and  access. 

I  get  especially  antsy 
when  I  see  those  deep 
pockets  being  used  to 
influence  decisions  on 
adopting  technology 
standards.  If  there’s  any 
decision  that  should  be 
made  totally  independent 
of  self-serving  vendor  lob¬ 
byists,  it’s  the  adoption 
by  a  government  or  an  international 
organization  of  a  technology  standard. 
Such  decisions  must  be  made  on  the 
basis  of  nothing  other  than  what  is  in 
the  best  interests  of  the  people  being 
served  by  that  body. 

As  I  continue  to  monitor  the  con¬ 
troversy  over  Massachusetts’  plan 
to  adopt  the  OASIS  OpenDocument 
format  standard  for  office  productivity 
applications,  I’m  becoming  increas¬ 
ingly  concerned  that  Microsoft  will 
ultimately  succeed  in  beating  the  state 
into  submission.  It’s  no  secret  that 
the  Microsoft  lobbying  machine  has 
pulled  out  all  the  stops  to  compel  the 
state  to  abandon  its  initiative  to  adopt 
OpenDocument,  a  standard  Microsoft 
clearly  sees  as  a  serious  competitive 
threat.  And  given  that  Microsoft  has 
virtually  unlimited  funds  to  throw  at 
the  challenge,  it’s  difficult  to  imagine 
that  those  within  the  state’s  IT  appara¬ 
tus  who  continue  to  push  the  standard 
will  prevail. 

The  Massachusetts  case  is  some¬ 
thing  of  a  red  flag.  It  makes  me 
wonder  how  widespread  and  institu¬ 
tionalized  the  effort  is  on  the  part  of 
technology  vendors  to  influence  stan- 
dards-related  decisions.  In  fact,  I  can’t 
help  but  wonder  what  they’re  doing 
behind  the  scenes  to  sway  the  stan- 
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dards  bodies  themselves. 

That’s  why  I  was 
intrigued  by  the  news 
last  week  that  the  Inter¬ 
national  Standards  Or¬ 
ganization  had  rebuffed 
China’s  submission  of  the 
WLAN  Authentication 
and  Privacy  Infrastructure 
(WAPI)  security  protocol 
for  consideration  as  an 
international  standard  for 
wireless  LANs.  The  ISO 
voted  overwhelmingly  to 
reject  WAPI  in  favor  of  the 
IEEE’s  802.11i  submission. 

There  has  been  no  stronger  voice 
in  favor  of  802.11i,  and  in  opposition 
to  WAPI,  than  Intel  —  another  vendor 
with  almost  unfathomably  deep  pock¬ 
ets.  The  last  thing  Intel  wants  is  any 
market  segmentation  that  would  create 
competition  for  its  Centrino  mobile 
technology,  which  incorporates  802.11L 
The  prospect  of  China  producing 
WAPI  chip  sets  under  the  aegis  of  an 


ISO  certification  no  doubt  sent  some 
pretty  uncomfortable  chills  through 
the  Intel  hierarchy. 

So,  did  Intel  exert  some  sort  of  in¬ 
fluence  or  pressure  on  the  ISO?  Not 
surprisingly,  the  Chinese  certainly 
think  so.  Cao  Jun,  general  manager  of 
IWNComm,  the  Chinese  company  that 
developed  the  WAPI  technology,  ear¬ 
lier  this  month  alleged  that  Intel  had 
engaged  in  backroom  politicking  with 
the  ISO. 

Moreover,  a  Chinese  industry 
group  that  backs  WAPI,  the  Broad¬ 
band  Wireless  IP  Standard  Working 
Group,  maintains  that  the  IEEE  had 
spread  misinformation  about  WAPI, 
and  it  wants  an  investigation  into  the 
IEEE’s  activities  during  the  voting 
process.  The  group  accused  the  IEEE 
of  acting  “selfishly  and  irresponsibly” 
to  protect  a  monopoly  commercial 
interest  —  an  apparent  reference  to 
Intel. 

Obviously,  all  of  this  could  well  be 
nothing  more  than  sour  grapes  on  the 
part  of  the  Chinese,  who  have  invested 
heavily  in  WAPI.  But  their  concerns 
merit  serious  consideration.  Given  the 
fact  that  fairly  zealous  lobbying  is  stan¬ 
dard  procedure  in  the  U.S.  business 
community,  it’s  no  wonder  the  Chinese 
are  suspicious.  * 
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THORNTON  A.  MAY 

HRIsOutof 
Sync  With 
IT  Work 

The  world  of  IT  work 
has  changed  signifi¬ 
cantly  in  the  past 
three  years.  Have  the  prac¬ 
tices  of  human  resource 

departments  kept  up?  Do  the  humans 
in  the  IT  department  pay  anything 
more  than  lip  service  to  the  policies 
and  practices  of  the  HR  department? 
Is  HR  a  roadblock  on  IT’s  journey  to 
create  value  for  the  enterprise? 

These  were  the  topics  that  filled  a 
recent  daylong  discussion  at  UCLA’s 
Managing  the  Information  Resource 
program.  Along  with  the  results  of 
ongoing  surveys  conducted  at  the 
IT  Leadership  Academy  and  polls  of 
the  hundreds  of  alpha  practitioners 
who  attended  Comput- 
erworld’s  Premier  100 
IT  Leaders  Conference 
two  weeks  ago,  that  dis¬ 
cussion  reveals  a  grow¬ 
ing  concern  that  HR, 
while  critical  to  the  ef¬ 
fective  functioning  of  IT, 
is  in  many  ways  out  of 
touch  with  the  current 
realities  of  how  IT  work 
actually  gets  done. 

Here  are  some  ex¬ 
amples: 

■  IT  practitioners  say 
job  descriptions  cease 
being  relevant  after  someone  has  been 
doing  the  work  for  six  months  or  so. 
The  job  the  employee  actually  does  af¬ 
ter  that  initial  period  typically  morphs 
into  something  very  different,  but  job 
descriptions  are  rarely  updated.  The 
problem  is  that  many  widely  deployed 
HR  practices  were  created  for  Indus¬ 
trial  Age  work  environments.  It’s  time 
for  an  HR  upgrade  to  the  Age  of  Big 
Information  (see  “Entering  the  Age  of 
Big  Information,”  Feb.  20). 

■  The  work  of  contingent  or  tempo¬ 
rary  employees,  who  may  constitute 
as  much  as  80%  of  the  head  count  in 
many  IT  shops,  is  typically  counted 
and  measured  very  differently  than 
that  of  full-time  workers,  giving  a  dis¬ 
torted  view.  Thus,  although  HR  may 
boast  that  it  has  reduced  or  held  the 
line  on  IT  head  count,  more  people 


THORNTON  A.  MAY  is  a 

longtime  industry  observer, 
management  consultant 
and  commentator.  Contact 

him  at  thorntonamay@ 
aol.com. 


March  20, 2006  COMPUTED*!}  21 


www.computerworld.com 


OPINION 


may  actually  be  working  on  IT  projects 
than  ever  before. 

■  A  stunning  89%  of  the  IT  execu¬ 
tives  queried  at  the  Premier  100  con¬ 
ference  said  that  their  organizations 
aren’t  spending  enough  on  grooming 
the  next  generation  of  IT  leaders;  51% 
said  their  organizations  are  spending 
“way  too  little”  in  this  area. 

And  “HR  doesn’t  get  IT”  is  not  just 
a  North  American  plaint.  Recent  re¬ 
search  conducted  by  consulting  firm 
McKinsey  &  Co.  shows  that  boards  of 
directors  and  senior  executives  in  Eu¬ 
rope  have  similar  concerns. 

One  thing  is  certain:  Organizations 
are  going  to  be  spending  increasing 
amounts  of  time  on  IT  management 
issues.  One  of  the  attributes  of  high- 
performance  companies  is  that  there  is 
a  great  —  not  just  good  —  relationship 
between  the  HR  and  IT  organizations. 

One  of  the  leading  experts  on  HR 
management,  professor  David  Lewin  of 
the  Anderson  School  at  UCLA,  says  IT 
leaders  should  be  talking  to  their  HR 
colleagues  about  an  HR  management 
portfolio  with  these  eight  facets: 

1.  Job  and  work  design 

2.  Selection  and  staffing 

3.  Performance  appraisal 

4.  Compensation  and  rewards 

5.  Training  and  development 

6.  Employee  relations 

7.  Safety,  health  and  wellness 

8.  Workforce  diversity 

Work  in  the  Age  of  Big  Informa¬ 
tion  is  not  a  matter  of  just  showing  up 
and  doing  something  that  takes  more 
brawn  than  brains.  Today’s  workplace 
must  balance  the  value  outcomes  that 
the  employer  is  seeking  against  the 
rights,  powers  and  aspirations  of  in¬ 
creasingly  mobile  workers  applying 
information-based  skills.  HR  in  many 
organizations  seems  both  disconnect¬ 
ed  from  the  goals  of  the  corporation 
and  insensitive,  almost  to  the  point  of 
malfeasance,  to  the  emerging  needs  of 
a  highly  skilled  IT  workforce. » 


DAVID  MOSCHELLA 

Where’s 
Your  Edge? 

Few  topics  get  more  at¬ 
tention  in  our  industry 
than  the  relationship 
between  IT  and  competitive 

advantage.  Does  IT  help  drive  rev¬ 
enues,  gain  market  share  or  improve 


margins?  That’s  what  ulti¬ 
mately  matters.  My  firm’s 
research  shows  that  a  little 
more  than  a  quarter  of  busi¬ 
ness  executives  believe  that 
their  use  of  IT  gives  them 
these  sorts  of  direct  advan¬ 
tages  in  their  markets. 

But  while  competitive  ad¬ 
vantage  should  be  discussed 
primarily  in  business  terms, 

IT  organizations  can  also 
benefit  by  examining  their 
own  operations  to  identify 
where  competitive  differen¬ 
tiation  is  being  sought  and 
delivered.  In  working  with 
our  clients,  we  have  found  the  2-by-2 
diagram  shown  here  to  be  of  significant 
help  in  determining  the  relative  impor- 
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tance  of  technology  and  in¬ 
dustry-specific  capabilities. 

As  the  figure  suggests, 
there  are  four  main  ways 
that  IT  organizations  can 
seek  to  differentiate  them¬ 
selves: 

Edge  in  efficiency.  Corpo¬ 
rate  IT  can  seek  to  deliver 
the  necessary  table  stakes 
for  the  industry  in  which 
the  company  competes,  at 
lower  costs  than  competi¬ 
tors.  If  this  is  the  overriding 
aim,  the  other  three  quad¬ 
rants  don’t  really  matter. 
Edge  in  adoption.  Many  IT 
organizations  are  naturally  inclined 
to  emphasize  this  quadrant,  since  it 
gives  them  license  to  work  with  the  lat¬ 
est  tools  of  their 
profession.  But 
what  is  needed  is 
a  truly  objective 
analysis  of  which 
new  technolo¬ 
gies  should  be 
adopted  and  at 
what  rate. 

Edge  in  industry. 
One  IT  organi¬ 
zation  can  be 
more  effective 
than  another  by 


simply  being  better  in  tune  with  the 
needs  of  the  company  and  its  industry 
sector,  but  this  tends  to  run  against 
the  grain  of  many  IT  staffers,  who  see 
themselves  less  as  industry  specialists 
and  more  as  masters  of  largely  general- 
purpose  skills  and  technologies. 

Edge  in  sophistication.  Every  industry 
has  its  leading  edge  of  advanced  usage, 
and  it  typically  lies  at  the  intersection 
of  IT  and  emerging  business  opportu¬ 
nities.  Think  advanced  simulations,  the 
trading  of  derivatives  or  affinity  mar¬ 
keting.  Does  your  company  compete  in 
these  realms,  and  if  it  does,  what  role, 
if  any,  does  IT  play? 

While  many  IT  organizations  will 
have  strategies  for  all  four  quadrants, 
we  have  found  that  the  relative  priori¬ 
ties  are  rarely  agreed  upon  explicitly 
with  the  business  and  that  corporate 
IT  often  leans  too  much  toward  the  left 
side  of  the  diagram.  There  is  a  real  op¬ 
portunity  for  IT  organizations  to  raise 
their  profile  by  articulating  how  well 
aligned  they  are  with  their  company’s 
overall  competitive  positioning.  It’s  not 
a  difficult  exercise,  but  when  was  the 
last  time  you  really  did  it? » 
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Self-improvement 

REALLY  ENJOYED  Paul 
Ingevaldson's  article  in  Comput- 
erworld  about  the  "Seven  People 
of  Highly  Ineffective  Habits”  [Jan. 
23],  It  was  a  very  realistic  view  on 
defining  IT  roles  seen  today.  I  was 
able  to  place  myself  in  a  couple  of 
the  categories  (as  well  as  many  of 
my  co-workers).  I  had  better  start 
weaning  myself  off  those  ineffec¬ 
tive  habits. 

Kayer  Kapadia 
Systems  administrator, 
Republic  Title,  Dallas, 
kk@republictitle.com 

Telegrams  Were 
Attention-getters 

ON  TENNANT,  in  his  Feb.  13 
editorial,  “Laughing  Matter,” 
says  he  “can’t  begin  to  fathom” 
who  sent  20,000  telegrams  via 
Western  Union  in  2005.  Well,  I 
have  recently  sent  a  telegram, 
though  I  can’t  imagine  that  the 


20,000  people  last  year  found 
themselves  in  the  same  situation  I 
did.  It  was  2002,  and  I  was  trying 
to  contact  some  local  friends  to 
invite  them  to  a  going-away  party 
for  a  friend  moving  to  Florida.  I  left 
them  a  few  voice-mail  messages 
that  were  never  returned,  so  I 
ended  the  last  one  with,  “What, 
do  I  have  to  send  you  guys  a  tele¬ 
gram?”  Then  I  found  out  that  you 
still  could.  So  I  did. 

Aian  Groupe 

Principal  software  developer, 
Oracle  Corp.,  Nashua,  N.H. 


Who’s  Next? 

I  T  WAS  refreshing  to  finally  see 
some  reality  introduced  into  the 
entire  security  patch  issue  in  the 
Jan.  23  article  “Microsoft  Earns 
Patching  Praise  From  IT  Execs." 

Microsoft-bashing  has  been 
chic  among  the  technically  savvy 
for  years,  and  it  can  often  be  justi¬ 
fied.  Microsoft  will  continue  to 
be  a  major  target  of  hackers  and 


detractors  as  a  function  of  its  size 
and  influence.  There  just  is  not 
much  reward  in  attacking  some¬ 
thing  with  minimal  market  share, 
desktop  coverage  or  importance. 

However,  as  Microsoft  contin¬ 
ues  to  shore  up  security  issues, 
those  bent  on  causing  grief  are 
going  to  seek  easier  targets.  What 
comes  next?  Certainly,  open- 
source  products  such  as  Linux  are 
starting  to  appear  on  the  bad  guys' 
radar.  It  will  be  interesting  to  see 
how  issue  identity,  resolution  and 
patch  management  evolve  in  that 
fluid  environment. 

Mitchell  Draper 
Assistant  vice  president  and 
director  of  IT,  Capital  City 
Insurance,  Columbia,  S.C. 


WOULDN’T  IT  be  nice  if 
the  headline  instead  said, 
“Microsoft  Earns  Praise  From  IT 
Execs  for  a  Solid  System”? 

Dave  Olson 

Manager,  data  processing  and 
phone  systems,  Sioux  Falls,  S.D. 


Not  Our  Job,  Man 

IN  HIS  column  “Creative  Bun¬ 
gling”  [Feb.  6],  Frank  Hayes 
says,  “Even  though  data  security 
is  IT’s  job,  this  isn’t  a  problem  that 
IT  can  solve.”  Actually,  data  secu¬ 
rity  is  not  IT’s  job,  and  that  is  why 
IT  can’t  solve  this  problem. 

Mikhail  Utin 

Security  analyst,  MRC  Inc., 
Middletown,  R.I., 
mutin@rubos.com 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computer- 
world,  P0  Box  9171, 1  Speen  Street, 
Framingham,  Mass.  01701.  Fax: 
(508)  879-4843.  E-mail:  letters® 
computerworld.com.  Include  an 
address  and  phone  number  for  im¬ 
mediate  verification. 
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Q&A 

Net  Gains 

Internet  pioneers  Robert  E.  Kahn  (right)  and 
Vinton  Cerf,  along  with  networking  expert 
Guru  Parulkar,  comment  on  the  Internet’s  past 
and  present  and  speculate  that  we  might  have 
an  interplanetary  Net  within  10  years.  PAGE  26 


FUTURE  WATCH 

Automagic  Code  Generators 

Techniques  for  generating  software 
automatically  have  existed  for 
decades.  But  now  researchers 
are  taking  it  to  a  higher  level. 

PAGE  28 


SECURITY  MANAGER’S  JOURNAL 

Expecting  All-in-One 
Security  Headaches 

The  state  is  imposing  all-in-one 
security  appliances  on  C.J.  Kelly’s 
agency,  and  already  she  sees  more 
cons  than  pros.  PAGE  30 
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GOOGLE  INC.’S  RECENT  FORAY  into  the  enterprise 
search  market  may  have  raised  the  profile  of  the  tech¬ 
nology,  but  the  tools  are  nothing  new  to  Jeff  Watts 
and  National  Instruments  Corp.’s  3,500  employees 
and  25,000  customers. 

“We  use  our  enterprise  search  engine 
everywhere  throughout  the  company,” 
says  Watts,  search  and  syndication 
manager  at  the  Austin-based  company. 

“We’ve  had  enterprise  search  since 
before  the  dot-com  era  and  outgrown 
many  different  tools  along  the  way.” 

The  company  uses  an  engine  from 
Fast  Search  &  Transfer  ASA  (FAST) 
in  Oslo  to  index  a  half-million  internal 
documents  and  several  hundred  thou¬ 
sand  more  on  its  customer-facing  sites.  It’s 
also  in  the  process  of  indexing  100  million  records  in 
its  data  warehouse  as  part  of  a  business  intelligence 
project.  On  top  of  that  index  lie  about  30  interfaces 
designed  for  specific  applications. 

“If  you  are  using  a  Web  search  engine  like  Google 
or  Yahoo  or  MSN,  you  have  one  interface  into  a  vari¬ 
ety  of  different  types  of  documents,”  Watts  says.  “But 
with  enterprise  search,  you  can  tailor  it  to  your  busi¬ 
ness  needs.” 


IN  GOOGLE’S 


MOVES  BY  THE  WEB  SEARCH 
GIANT  HAVE  FOCUSED  NEW 
ATTENTION  ON  ENTERPRISE 
SEARCH  AND  GOTTEN  THE 
ATTENTION  OF  THE  LEADING 
PLAYERS.  BY  DREW  ROBB 


One  such  interface  is  designed  for  tech  support,  an 
area  where  National  Instruments  spares  no  expense 
—  it  hires  engineers  for  front-line  support.  There  is  a 
special  portal  interface  providing  quick  access  to  the 
information  those  engineers  need 
to  quickly  answer  customer  ques¬ 
tions.  The  search  system  also  serves 
its  customers  in  35  languages. 

“When  we  make  these  technolo¬ 
gies  —  like  a  fully  searchable  prod¬ 
uct  catalog  in  a  new  language  —  sales 
trend  up  dramatically  in  those  re¬ 
gions,”  says  Watts.  “FAST  enables  us 
to  put  that  kind  of  e-commerce  infor¬ 
mation  in  front  of  the  users.” 

Google  and,  to  some  extent,  its  rival 
Yahoo  Inc.  are,  of  course,  the  search 
engines  dominating  the  news.  Business  sections 
track  Google’s  stock  fluctuations,  and  the  February 
congressional  hearings  on  its  China  operations  were 
front-page  material. 

“Google  has  created  a  lot  of  visibility  around 
search  on  the  consumer  side,”  says  Matthew  Brown, 
an  analyst  at  Forrester  Research  Inc.  “Companies  are 
very  excited  about  that  and  see  that  search  can  be  a 
mission-critical  application  for  the  enterprise.” 
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But  what  works  well  in  Internet 
search  doesn’t  always  meet  enterprise 
needs.  So  although  Google  does  offer 
enterprise  search  appliances  and  just 
released  two  new  low-cost  versions 
in  January,  it’s  not  necessarily  where 
the  news  lies  in  terms  of  cutting-edge 
technology. 

“In  the  basic  information-retrieval 
area,  Google  is  being  very  disruptive,” 
says  Brown.  “It  has  come  in  at  a  very 
compelling  price  point,  but  they  are 
not  a  product  leader  and  are  not 
differentiating  themselves  in  terms 
of  features  and  functionality.” 

Brown  breaks  down  search  into 
three  main  categories.  There  is  the 
traditional  function  of  simply  locating 
and  retrieving  documents.  Next  comes 
the  ability  to  do  a  deeper  analysis  of 
the  data  to  locate  patterns  and  trends, 
and  to  meet  specific  needs  for  business 
intelligence,  regulatory  compliance, 
discovery  in  legal  cases  or  other  areas. 
Finally,  there  is  real-time  monitoring 
and  analysis  of  data,  particularly  for 
security  and  financial  applications. 

Google  is  strong  in  retrieval,  but  not 
in  the  other  areas.  Instead,  companies 
such  as  Autonomy  Inc.,  Endeca  Tech¬ 
nologies  Inc.  and  FAST  are  leading 
the  way  by  providing  deeper  analysis 
and  the  ability  to  integrate  with  other 
enterprise  applications  to  improve  em¬ 
ployee  productivity,  meet  compliance 
needs  or  drive  business  initiatives. 

“These  search  engines  have  more  an¬ 
alytic  abilities  to  discover  relationships 
among  documents  by  picking  up  com¬ 
mon  terms,”  says  Rita  E.  Knox,  an  ana¬ 
lyst  at  Gartner  Inc.  “Many  enterprises 
also  need  augmented  capabilities  be¬ 
yond  standard  search,  such  as  identify¬ 
ing  what  is  a  company  name,  a  person’s 
name  or  a  geographical  location.” 

Targeted  Search 

Selecting  the  right  search  engine, 
therefore,  relies  on  identifying  busi¬ 
ness  needs  and  finding  the  best  match. 

“Companies  tend  not  to  use  a  single 
product  but  a  variety  of  products, 
based  on  what  they  are  trying  to  do,” 
says  Knox. 

For  instance,  National  Instruments 
used  four  search  tools  before  standard¬ 
izing  on  FAST.  Other  organizations 
also  implement  multiple  applications 
targeted  to  particular  business  needs. 

Sutter  Health,  a  nonprofit  organiza¬ 
tion  in  Sacramento  that  operates  26 
Northern  California  hospitals,  is  using 
Autonomy’s  software  for  competi¬ 
tive  research.  It  analyzes  newspapers, 
professional  journals,  health  care  in¬ 
dustry  Web  sites  and  information  on 
the  group’s  internal  bulletin  boards. 
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Jim  Harrison,  Sutter’s 
vice  president  for  busi¬ 
ness  intelligence,  says 
Autonomy  is  automat¬ 
ing  what  had  been  a 
resource-intensive  and 
manual  process. 

“It  is  significantly 
improving  our  ability 
to  respond  as  a  group 
to  questions  people  are 
asking  us,”  he  says.  “It 
gives  us  more  time  to 
sit  down  and  analyze 
the  data  because  we 
aren’t  sitting  around 
figuring  out  where  we 
need  to  file  an  article 
or  where  it  was  located 
after  we  filed  it.” 

World  Book  Inc.  uses  search  engines 
to  provide  content  to  customers.  The 
Chicago-based  encyclopedia  publisher 
uses  Endeca’s  search  engine  to  improve 
customer  service.  Since  the  company 
is  competing  with  free  information 
services  on  the  Web,  it  must  provide  a 
significantly  better  customer  experi¬ 
ence,  says  Chief  Technology  Officer 
Tim  Hardy. 

“Attracting  and  retaining  subscribers 
requires  that  we  offer  an  experience 
that  helps  users  quickly  and  easily 
find  desirable  information  while  show- 


WHILE  MANY  organizations  switch  from  a 
Web  search  to  an  enterprise  search  engine, 
the  FirstGov  portal  has  gone  the  other  way. 
FirstGov,  which  acts  as  the  official  home 
page  for  the  U.S  federal  government,  is  man¬ 
aged  by  the  General  Services  Administration. 

When  the  site  launched  in  the  fall  of 
2000,  it  used  a  custom  search  engine  cre¬ 
ated  by  a  foundation  established  by  Eric 
Brewer,  founder  of  search  engine  pioneer 
Inktomi.  Then,  in  the  spring  of  2002,  the 
site  started  using  an  enterprise  search 
engine  from  Fast  Search  &  Transfer  that 
would  index  the  data  contained  within  all 
the  government  agency  sites. 

“We  were  crawling  all  the  government 
sites  ourselves,"  says  Bob  Keating,  the 
GSA’s  search  and  program  manager.  “The 
model  didn't  scale  well  to  what  we  needed 
to  do  in  searching  the  entire  government.” 

This  past  January,  the  site  reverted  to 
a  Web  search  model.  FirstGov  now  uses 
Vivisimo  Inc.’s  Clusty  Web  search  technol¬ 
ogy  with  Microsoft  Corp.’s  MSN  Web  index. 
MSN  already  crawls  all  the  government 
sites  for  its  own  index. 


casing  the  breadth 
of  quality  content 
available,”  says  Hardy. 
“High-failure  search 
rates,  slow  perfor¬ 
mance  and  an  inability 
to  showcase  the  differ¬ 
ent  types  of  available 
content  with  a  home¬ 
grown  solution  were 
hurting  our  ability 
to  scale  the  business 
and  attract  new  sub¬ 
scribers.” 

It  was  also  killing 
IT  productivity.  The 
staff  spent  80%  of  its 
time  on  search  main¬ 
tenance  and  20%  on 
improvements. 

World  Book  uses  Endeca  on  a  cluster 
of  Sun  Solaris  servers  to  access  content 
in  10  databases,  including  encyclopedia 
articles,  images,  maps  and  dictionaries, 
and  then  present  that  content  to  clients. 
It  performs  the  indexing  off-line  and 
then  pushes  it  to  the  production  envi¬ 
ronment  at  least  once  a  week.  Hardy 
says  that  using  Endeca  has  increased 
the  search  speed  by  a  factor  of  eight  to 
10  while  providing  richer  results. 

“Content  spotlighting  showcases 
relevant  results  for  all  types  of  content 
in  a  single  view,”  he  says.  “For  example, 


“We  are  using  the  MSN  index  filtered 
for  government  sites  rather  than  doing  any 
crawling  ourselves,”  says  Keating.  “Rather 
than  reinvent  the  wheel,  we  get  the  data  from 
somebody  who  already  does  it  really  well.” 

As  a  result,  the  GSA  has  replaced  the 
24  Servers  it  was  using  for  the  FirstGov  site 
with  a  service  hosted  by  Pittsburgh-based 
Vivisimo,  cutting  its  costs  in  half.  In  the 
process,  the  number  of  official  government 
documents  available  through  the  site  has 
increased  from  8  million  to  40  million.  It 
also  provides  searchers  with  easier  access 
to  relevant  information  by  clustering  the 
search  results  by  category.  For  example,  the 
search  results  page  now  has  a  tab  listing 
federal  forms  that  match  the  query. 

“We  still  use  [Autonomy's  K2]  enterprise 
search  for  the  GSA.gov  site,”  says  M.J. 
Pizella,  associate  administrator  of  the 
GSA’s  Office  of  Citizen  Services  and  Com¬ 
munications.  “But  for  FirstGov,  we  wanted 
to  get  information  quicker,  without  having  to 
get  into  the  agency  sites,  and  Web  search 
allows  us  to  do  that.” 

-DREW  ROBB 


a  search  for  ‘Iraq’  returns  encyclopedia 
articles  on  Iraq,  plus  maps  of  the  coun¬ 
try  and  region,  recent  photos,  special 
reports  on  the  war  in  Iraq  and  its  after- 
math,  and  audio  files  of  President  Bush 
sending  troops  to  Iraq.” 

The  new  search  engine  has  contrib¬ 
uted  to  a  20%  increase  in  sales,  as  well 
as  a  30%  to  40%  reduction  in  technical 
support  calls,  says  Hardy. 

Factiva,  a  New  York-based  joint  ven¬ 
ture  of  Reuters  Group  PLC  and  Dow 
Jones  &  Co.,  uses  FAST  to  analyze 
5  million  news  items  per  month  from 
10,000  sources  and  feed  that  informa¬ 
tion  to  1.8  million  paying  business  sub¬ 
scribers.  Factiva  uses  a  four-step  auto¬ 
mated  and  manual  process  to  ensure 
that  everything  is  correctly  catego¬ 
rized.  Customers  can  receive  the  data 
either  as  an  XML  feed  or  a  Web  service 
for  integration  into  their  corporate  in¬ 
tranets,  or  their  CRM  or  competitive- 
intelligence  systems. 

“We  work  with  the  clients  to  inte¬ 
grate  the  content  behind  their  firewall 
and  build  out  their  own  intranet,”  says 
Clare  Flart,  president  of  the  Dow  Jones 
Enterprise  Media  Group.  “FAST  fit  the 
profile  for  both  the  commercial  prod¬ 
uct  and  the  relationship  we  could  have 
with  out  clients.” 

Spending  on  enterprise  search  is 
growing  much  faster  than  overall  IT 
spending,  according  to  Forrester’s 
Brown.  Nearly  all  major  enterprise 
search  vendors  experienced  a  65% 
to  more  than  100%  growth  rate  last 
year,  he  says.  The  question  is  whether 
it  will  remain  as  a  separate  software 
category  for  long.  “Enterprise  search  is 
getting  embedded  in  a  lot  of  different 
solutions,  like  business  intelligence, 
compliance,  e-discovery,  surveillance, 
security,  fraud  detection  and  quality 
management,”  Brown  says.  “There  is  a 
whole  range  of  business-critical  appli¬ 
cations  that  go  beyond  just  document 
retrieval,  and  search  is  playing  an  im¬ 
portant  role  there.” 

Search  vendors,  therefore,  may  wind 
up  becoming  absorbed  by  larger  com¬ 
panies.  For  example,  Yahoo  bought  Ink¬ 
tomi  in  2003,  and  Oracle  Corp.  bought 
TripleHop  Technologies  Inc.  last  year 
and  plans  to  integrate  that  company’s 
search  functions  into  its  database  line. 

“There  are  indicators  that  informa¬ 
tion  access  is  moving  toward  absorp¬ 
tion  into  applications,”  says  Gartner’s 
Knox.  “This  seems  to  be  how  Micro¬ 
soft  is  heading  with  Vista  and  Office 
12,  and  may  be  what  the  bigger  players 
such  as  IBM  and  Oracle  go  for.”  > 


Robb  is  a  Computerworld  contributing 
writer  in  Los  Angeles. 


IF  YOU  ARE  USING  A 
WEB  SEARCH  ENGINE 
LIKE  GOOGLE  OR 
YAHOO  OR  MSN,  YOU 
HAVE  ONE  INTERFACE 
INTO  A  VARIETY  OF 
DIFFERENT  TYPES 
OF  DOCUMENTS.  BUT 
WITH  ENTERPRISE 
SEARCH,  YOU  CAN 
TAILOR  IT  TO  YOUR 
BUSINESS  NEEDS. 


JEFF  WATTS,  SEARCH  AND 
SYNDICATION  MANAGER, 
NATIONAL  INSTRUMENTS  CORP. 
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Storage  Hardware 

Install  trusted  storage.  Move  up  to  an 
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Exchange  Storage  Management 

Spend  less  time  managing  Exchange  with 

EMC  Storage  Administrator™  for  Exchange 
SMB  Edition  —  migrate,  get  failover,  and 
allocate  storage. 

Storage  Management 

Get  a  clear  view  into  how  storage  is  being  used 
and  manage  your  storage  for  greater  efficiency 
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Backup  &  Recovery 

Data  recovery  matters  when  bad  things  happen. 
EMC  Retrospect®:  self-adjusting  backup 
operations,  AES  encrypted  backups. 

Replication 

Every  minute  counts.  EMC  RepliStor®  SMB 
Edition  ensures  no  data  is  lost  when  a  server 
goes  down. 

Collaboration 

A  winning  team  works  together.  EMC  eRoom™ 
SMB  Edition  creates  secure  web-accessible 
workspaces. 
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Faster  performance,  less  management.  Users 
can  now  recover  their  own  files.  Upgrade 
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Internet  experts 

Robert  E.  Kahn, 
Vinton  Cerf  and 
Guru  Parulkar 

assess  the 
evolution  of  the 
Internet  so  far 
and  speculate 
about  its  future. 


WHEN  ROBERT  E.  KAHN 
and  VINTON  CERF 

created  the  TCP/IP 
protocol,  they  laid 
the  foundation  for 
today’s  Internet. 

GURU  PARULKAR,  a  20-year  veteran  in  the 
networking  industry,  is  program  direc¬ 
tor  at  the  National  Science  Foundation’s 
computer  and  network  systems  division, 
where  he  is  working  on  the  GENI  Initia¬ 
tive,  a  research  testbed  for  the  future 
Internet.  Kahn  and  Cerf  are  also  playing 
a  role  in  the  Internet’s  future:  Kahn  is 
chairman,  CEO  and  president  of  the  Cor- 
porationfor  National  Research  Initia¬ 
tives,  and  Cerf  is  chief  Internet  evangelist 
at  Google  Inc.  Computerworld’s  Robert  L. 
Mitchell  asked  each  of  them  to  comment 
on  the  Internet’s  past,  present  and  future. 

Qls  the  Internet  today  better  than 
it  was  five  years  ago? 

CERF:  The  Internet  is  larger 
than  it  was  five  years  ago  by  a 
factor  of  at  least  five.  It  continues  to 
function  reliably,  and  the  underlying 
systems  have  higher  absolute  capacity. 
It  continues  to  expand  to  support  new 
applications,  including  real-time  inter¬ 
active  games,  voice,  collaborative  tools 
and  peer-to-peer  applications. 

New  content  is  surging  into  the  net¬ 


Guru 

Parulkar 


work,  and  search  tools  have  become 
much  more  sophisticated.  The  network 
continues  to  support  new  applications 
that  seem  to  be  invented  daily.  Wire¬ 
less  access  has  proliferated,  and  mobile 
phones  are  increasingly  Internet- 
enabled.  Geolocation  services  are  be¬ 
coming  more  visible. 


Qln  the  Internet,  intelligence 

resides  at  the  edge.  In  today’s 
telecommunications  networks, 
it  resides  in  the  network.  As  the 
two  worlds  converge,  can  these  models 
continue  to  coexist? 

PARULKAR:  In  the  original  Internet 
model,  the  network  is  [not]  just  a  pack¬ 
et  transport  mechanism.  There  is  a  lot 
of  intelligence  inside  the  network,  in 
the  form  of  servers  and  devices.  In  the 
future,  we  have  to  think  about  balance. 
How  much  intelligence?  Clearly,  there 
is  this  recognition  that  we  have  to  re¬ 
visit  this  architectural  principle. 

We  are  talking  about  three  scenarios. 
One  is  the  Internet  may  borrow  some 
of  the  ideas  [of  the  telecommunications 
networks].  Another  possibility  is  that 
a  parallel  infrastructure  emerges.  A 
third  possibility  is  the  telephone  net¬ 
work  becomes  one  and  the  same  thing 
as  the  Internet.  The  telephone  network 
is  now  merging  with  the  Internet.  The 
Internet  may  merge  into  the  telephone 
system  20  years  down  the  road. 

KAHN:  I  tend  to  think  of  the  Internet 
as  not  having  edges.  Increasingly,  the 
network  providers  will  see  ways  of 
doing  intelligent  things  within  their 
nets.  The  real  question  will  be,  to  what 
extent  can  they  work  with  application 
providers  to  do  a  better  job  of  meeting 
user  needs? 

QWhat  has  surprised  you  most 

about  the  way  in  which  the  Inter¬ 
net  has  evolved? 

KAHN:  The  introduction  of 
the  personal  computer  suddenly  meant 
that  the  number  of  machines  that  could 
be  connected  was  thousands,  tens  of 
thousands,  more.  Some  argue  that  we 
have  close  to  a  billion  users  on  the  In¬ 
ternet.  That  was  a  big  surprise.  I  take 
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I  «9Q170«Thefirst 
1  151#  global 

connections  to  the  Arpanet; 
are  established,  with  nodes 
at  University  College  in 
:  London  and  Royal  Radar 
Establishment  in  Norway. 


1QQ7-The  USSR- 

IwW  #  ■  launches  Sputnik, 
the  first  man-made  satellite.  In 
response,  President  Eisenhower 
creates  the  Advanced  Research 
Projects  Agency  (ARPA)  within 
the  U.S.  Department  of  Defense. 


4j  Qfifl  „  The  Defense  Depart- 
Iwwwa  ment commissions 
the  Arpanet  for  research  into  net¬ 
working,  with  the  first  node  at  the 
University  of  California,  Los  Angeles, 
followed  by  nodes  at  Stanford  Univer¬ 
sity;  the  University  of  California,  Santa 
Barbara;  and  the  University  of  Utah. 


Packet-switching 
networks  are  developed, 


4  AlVi|  m  Cerf  and  Kahn 
1 51  #H«  publish  “A 
Protocol  for  Packet  Network 
Intercommunication,”  which  is 
now  recognized  as  a  ground¬ 
breaking  document  describing 
how  to  connect  several  different 
packet-switching  networks. 


OH  -  Kahn  and 
I5J#D~0^.  Cerf  lead 
the  way  in  the  development  of  the 
TCP  and  IP  protocols  for  Arpanet;  the 
protocols  will  become  the  backbone 
of  the  Internet. 


Arpanet  ceases  to  exist, 
symbolizing  the  commer¬ 
cialization  of  the  Internet, 
The  number  of  hosts  ex¬ 
ceeds  300,000. 


The  number  of 
hosts  exceeds 
100,000. 


The  number  of 
hosts  exceeds 
1,000.  The 
Domain  Name 
System  is 
introduced. 


'IQG‘l«TheWorld 

1515#  I  >  Wide  Web, 
developed  by  Tim  Berners' 
Lee,  is  released  by  CERN. 
The  Web  provides  a  dis¬ 
tributed  hypermedia  sys¬ 
tem  for  the  Internet. 


4|  QftO  ■  The  graphical 
1 5#  5#  O  m  browser  Mosaic 
is  developed  by  Marc  Andrees¬ 
sen  and  his  team  at  the  National 
Center  for  Supercomputing  Ap¬ 
plications.  The  White  House  and 
the  United  Nations  come  online. 


A  a  Local  com- 

1 5#5#"Va  munities, 

the  first  being  Lexington  and 
Cambridge,  Mass.,  come  on¬ 
line  as  the  Internet  begins  to 
touch  society  in  many  ways 
and  at  many  levels. 


2006:  ^ 
ubiquitous,  with  wireless 
access  and  millions  of 
nodes,  and  is  becoming  a 
primary  transaction  vehi¬ 
cle  of  the  global  economy. 


Microsoft 
jumps  into  the 
network  service 
provider  and 
browser  market. 


it  as  a  matter  of  pride  that  when  we 
did  the  original  design,  we  had  ideas 
of  scalability  and  modularity  in  mind. 
The  fact  that  it  did  work  was  not  a  sur¬ 
prise,  although  we  hadn’t  expected  it. 

The  misuse  of  the  Net  was  somewhat 
unexpected.  I  did  not  think  people 
would  misuse  it  as  much  as  they  did. 

QWhat  are  the  challenges  with 

using  the  Internet  today  for  busi¬ 
ness  communications? 

CERF:  The  Internet  continues 
to  be  challenged  by  viruses,  worms 
and  Trojan  horses,  [and]  denial-of- 
service  attacks  against  hosts  and  in¬ 
frastructure.  It  has  adapted  to  provide 
virtual  private  network  access  for 
businesses,  but  firewalls  and  network 
address  translation  devices  sometimes 
interfere  with  VPNs,  packet  voice  ser¬ 
vices  and  the  like.  Authentication  of 
users  is  still  a  challenge,  and  there  is  a 
need  for  more  end-to-end  confidential¬ 
ity.  Deployment  of  IPv6  is  still  slow 
in  most  of  the  network.  The  problems 
are  severe  and  lie  at  several  layers  in 
the  protocol  hierarchy  as  well  as  in  the 
quality  of  the  operating  system  soft¬ 
ware  that  is  so  readily  penetrated.  Op¬ 
erating  system  and  application  system 
designers  have  not  taken  into  account 
adequate  measures  for  authentication 
for  purposes  of  access  control,  leaving 
many  systems  open  to  exploitation. 

KAHN:  Security  was  something  that 
we  thought  about  in  the  early  days,  but 
there  were  so  many  obstacles  to  trying 


to  deploy  strong  security  that  we  just 
didn’t  go  down  that  path.  I  wouldn’t  say 
there’s  no  security  but ...  it  could  be 
better.  I  would  like  to  see  the  whole  is¬ 
sue  of  identity  management  addressed 
so  you  can  authenticate  information 
when  you  get  it.  But  I  don’t  know  [that] 
that’s  a  limitation.  It’s  just  an  aspiration 
for  something  that  could  be  better. 

PARULKAR:  If  you  look  at  mobile 
wireless,  the  Internet  was  not  designed 
for  this  degree  of  mobility.  The  IP  ad¬ 
dress  is  identical  to  an  attachment  point 
where  you  interface  to  the  network. 
When  people  are  constantly  moving, 
your  attachment  point  is  constantly 
changing.  So  there  is  this  issue  of,  can 
you  continue  to  use  IP  addresses  with 
this  architecture,  or  can  you  do  better  by 
decoupling  those  two  things?  You  may 
have  to  have  another  level  of  addressing. 

How  will  those  problems  be  fixed? 

PARULKAR:  Security  prob¬ 
lems,  spam,  robustness  —  these 
are  not  problems  you  can  fix  the 
way  we  are  doing  it,  by  adding  more 
and  more  boxes,  like  firewalls  and  IDSs. 
Some  are  inherent  to  the  architecture. 
The  assumption  of  the  Internet  was  that 
all  of  the  traffic  was  friendly.  We  know 
that  doesn’t  work.  There  are  no  easy  ar¬ 
chitectural  mechanisms  to  fix  it. 

CERF:  I  think  some  basic  rethinking 
of  security  and  some  built-in  primi¬ 
tives  are  needed  in  the  architecture  to 
tackle  this  problem  adequately.  Adding 
features  won’t,  in  themselves,  solve  the 


problem  without  some  serious  rework¬ 
ing  of  the  design  of  the  system. 

QWhat  do  you  think  the  Internet 
will  look  like  in  10  years? 

CERF:  Two  [billion]  to  3  bil¬ 
lion  users,  more  devices  on  the 
network  than  people,  huge  archives 
of  entertainment  content,  lots  of  third- 
party  services  to  manage  Internet- 
enabled  devices,  lots  of  wireless  access, 
lots  of  high-speed  fiber/cable  for  con¬ 
sumers,  mobiles  fully  Internet-enabled, 
much  more  refined  search  services  with 
significant  vertical  components,  much 
more  collaborative  interaction,  signifi¬ 
cant  financial  transactions  via  the  Net, 
more  diverse  online  advertising,  and  an 
operational  two-planet  interplanetary 
Internet  —  Earth,  Mars  —  with  plans 
to  extend  to  the  outer  planets. 

KAHN:  It’s  a  medium  of  social  interac¬ 
tion.  Of  business  interaction.  Of  informa¬ 
tion  access.  It’s  also  very  fragile  in  that  it 
requires  cooperation  around  the  world 
for  it  to  work.  I  hope  that  will  continue. 

The  potential  for  business-to-busi- 
ness  interaction  [hasn’t]  been  exploited 
to  nearly  the  extent  that  it  could  be.  To¬ 
day,  most  people  access  business  Web 
sites  to  see  what  companies  are  offering, 
maybe  place  orders.  But  that’s  just  the 
very  early  start. 

The  ability  of  the  Net  itself  to  facili¬ 
tate  bringing  together  virtual  organiza¬ 
tions  will  be  very  significant.  It  isn’t 
quite  here  yet,  but  I  think  that’s  one  of 
the  next  steps  we’ll  see. 


PARULKAR:  The  research  community 
has  to  look  beyond  the  Internet,  and  that 
is  what  GENI  is.  GENI  has  two  parts. 
One  is  research.  The  other  is  an  experi¬ 
mental  facility  in  which  [researchers] 
can  demonstrate  and  deploy  technolo¬ 
gies  at  scale.  There  are  a  half-dozen  ex¬ 
perimental  infrastructures  that  the  NSF 
has  supported.  PlanetLab  is  a  kind  of  a 
global  experimental  infrastructure.  It 
supports  what  are  called  virtual  overlay 
networks  on  top  of  the  Internet. 

The  paradigm  is  one  physical  in¬ 
frastructure  that  could  be  used  by  my 
people’s  teams  at  the  same  time  to  de¬ 
ploy  their  own  ideas  —  a  physical  infra¬ 
structure  that  you  can  slice  into  virtual 
slices.  Within  that  slice,  they  can  de¬ 
ploy  their  own  protocol  stack  and  ser¬ 
vices  and  demonstrate  that.  The  power 
of  it  is  you  can  give  different  people  a 
slice  of  a  resource,  and  they  think  the 
whole  resource  belongs  to  them.  Ev¬ 
erybody  agrees  it’s  a  great  means  for 
an  interesting  research  framework.  But 
some  people  are  saying  maybe  that’s  a 
great  operational  framework  as  well. 

What  users  want  is  to  be  able  to  cre¬ 
ate  their  own  virtual  network  with  its 
own  behavior,  security,  robustness, 
QoS.  Rather  than  point-to-point  trans¬ 
port,  if  you  give  them  the  mechanism 
by  which  they  get  their  own  virtual 
network,  corporations  will  be  happier. 
Providers  are  able  to  sell  something 
which  is  more  value-add  than  VPNs. 
They  can  provide  even  more  sophisti¬ 
cated  services  to  customers.  ► 
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Automagic 

-CODE, 

Generators 

Even  nonprogrammers  can 
‘program’  with  these  tools. 

BY  GARY  ANTHES 


TWENTY  YEARS  AGO, 
software  engineer 
Fred  Brooks  famously 
observed  that  there 
was  no  silver  bullet  that  could  slay  “the 
monster  of  missed  schedules,  blown 
budgets  and  flawed  products.”  Today, 
the  creation  of  software  might  seem  as 
expensive,  trouble-prone  and  difficult 
as  ever. 

And  yet  progress  is  being 
made.  While  there  is  still  no 
silver  bullet  in  sight,  an  array 
of  new  techniques  promises 
to  further  boost  programmer 
productivity,  at  least  in  some 
application  domains. 

The  techniques  span  a 
broad  spectrum  of  methods 
and  results,  but  all  are  aimed 
at  generating  software  au¬ 
tomatically.  Typically,  they 
generate  code  from  high- 
level,  machine-readable 
designs  or  from  domain- 
specific  languages  —  assisted 
by  advanced  compilers  — 
that  sometimes  can  be  used 
by  nonprogrammers. 

Gordon  Novak,  a  computer 
science  professor  at  the  Uni¬ 
versity  of  Texas  at  Austin  and 
a  member  of  the  school’s  Laboratory 
for  Artificial  Intelligence,  is  working  on 
“automatic  programming”  —  using  li¬ 
braries  of  generic  versions  of  programs, 
such  as  algorithms  —  to  sort  or  find 
items  in  a  list.  But  unlike  traditional 
subroutines,  which  have  simple  but  rig¬ 
id  interfaces  and  are  invoked  by  other 


lines  of  program  code,  his  technique 
works  at  a  higher  level  and  is  therefore 
more  flexible  and  easier  to  use. 

Novak’s  users  construct  “views” 
that  describe  application  data  and 
principles  and  then  connect  the  views 
by  arrows  in  diagrams  that  show  the 
relationships  among  the  data.  The  dia¬ 
grams  are,  in  essence,  very  high-level 
flowcharts  of  the  desired 
program.  They  get  compiled 
in  a  way  that  customizes  the 
stored  generic  algorithms 
for  the  user’s  specific  prob¬ 
lem,  and  the  result  is  ordi¬ 
nary  source  code  such  as  C, 
C++  or  Java. 

Novak  says  he  was  able  to 
generate  250  lines  of  source 
code  for  an  indexing  pro¬ 
gram  in  90  seconds  with  his 
system.  That’s  equivalent  to 
a  week  of  productivity  for 
an  average  programmer  us¬ 
ing  a  traditional  language, 
he  says.  “You  are  describing 
your  program  at  a  higher 
level,”  he  says.  “And  what 
my  program  is  saying  is,  ‘I 
can  tailor  the  algorithm  for 
your  application  for  free.’  ” 
Novak  says  he  intends  to 
expand  the  system  to  allow  construc¬ 
tion  of  larger  programs  and  eventually 
to  turn  it  into  a  commercial  product.  “I 
hope  to  move  programming  up  a  level, 
from  the  writing  of  code  to  program¬ 
ming  in  terms  of  abstractions,  such  as 
physical  models,  financial  models  and 
so  on,”  he  says. 


Douglas  Smith,  principal  scientist  at 
Kestrel  Institute,  a  nonprofit  computer 
science  research  firm  in  Palo  Alto, 
Calif.,  is  developing  tools  to  “automate 
knowledge  and  get  it  into  the  com¬ 
puter.”  Kestrel’s  development  system 
works  with  two  kinds  of  knowledge: 
the  skills  and  techniques  that  program¬ 
mers  have  —  about  data  structures 
and  algorithms,  for  example 
—  and  the  application  knowl¬ 
edge  that  an  end  user  has. 

Specware  Features 

A  programmer  starts  with 
Kestrel’s  Specware,  which 
is  a  general-purpose,  fifth- 
generation  language  that 
specifies  a  program’s  func¬ 
tions  without  regard  to  the 
ultimate  programming  lan¬ 
guage,  system  architecture, 
algorithms,  data  structures 
and  so  on.  Specware  draws 
on  a  library  of  components, 
but  the  components  aren’t 
code.  They  are  at  a  higher 
level  and  include  design 
knowledge  and  principles 
about  algorithms,  data  struc¬ 
tures  and  so  on.  Smith  calls 
them  “abstract  templates.” 

In  addition,  Specware  can 
produce  proofs  that  the  working  code 
is  “correct”  —  that  is,  that  it  conforms 
to  the  requirements  put  in  by  the  user 
(which,  of  course,  may  contain  errors). 
“Some  customers  want  that  for  very- 
high- 

assurance  applications,  with  no  secu¬ 
rity  flaws,”  Smith  says.  Kestrel  does 
work  for  NASA  and  U.S.  military  and 
security  agencies. 


Specware  is  essentially  a  productiv¬ 
ity  tool  for  programmers,  producing 
several  times  as  many  lines  of  code 
as  is  actually  written  by  the  program¬ 
mer.  But  Kestrel  has  something  at  an 
even  higher  level  —  a  language  called 
Planware  that’s  specifically  for  creating 
scheduling  applications  (see  chart). 

Smith  says  users  at  the  U.S.  Air 
Force,  who  know  about 
airplanes,  runways  and  air 
bases  but  not  software,  used 
it  to  create  an  aircraft  sched¬ 
uling  system. 

“It’s  a  language  for  writ¬ 
ing  down  problem  require¬ 
ments,  a  high-level  state¬ 
ment  of  what  a  solution 
should  be,  without  saying 
how  to  solve  the  problem,” 
Smith  says.  “We  think  it’s 
the  ultimate  frontier  in  soft¬ 
ware  engineering.  It’s  what 
systems  analysts  do.” 

In  the  future,  Kestrel  will 
enhance  its  techniques  by 
incorporating  some  of  the 
concepts  of  aspect-oriented 
programming  that  deal 
with  issues  that  cut  across 
programs,  such  as  activity 
logging  and  authentication. 
When  users  make  a  policy 
change  related  to  such  cross-cutting 
issues,  it  can  entail  expensive  code 
changes  at  many  places  in  a  system. 

“I  want  to  allow  programmers  to 
write  policies  at  a  very  high  level  and 
then  have  them  automatically  en¬ 
forced,”  Smith  says.“How  to  put  cross¬ 
cutting  issues  into  designs  is  one  of 
the  most  important  things  going  on  in 
software  engineering  right  now.”  » 


CODE  EXPLOSION 


“The  whole  history  of  computer  science 
has  been  toward  increasingly  high-level 
languages  -  machine  language,  assembler, 
macros,  Fortran,  Java  and  so  on  -  and  we 
are  working  at  the  extreme  end  of  that,” 
says  Douglas  Smith,  principal  scientist  at 
Kestrel  Institute. 

The  higher  the  programmer  goes,  the 
less  code  he  needs  to  write  and  the  less 


he  needs  to  know  about  algorithms,  data 
structures  and  hardware. 

When  Kestrel  and  the  U.S.  Air  Force  de¬ 
veloped  a  mission-scheduling  application, 
analysts  using  Kestrel's  Planware  language 
were  able  to  produce  17  lines  of  Specware 
code,  74  lines  of  Lisp  code  and  189  lines  of 
assembler  for  each  line  written  in  Planware. 

-GARY  ANTHES 


LINES  OF  CODE  LANGUAGE 


Kestrel  Planware 

Kestrel  Specware 

Common  Lisp 
Assembler 


LANGUAGE  DESCRIPTION 


6GL  domain-specific  requirements-modeling 
language,  partly  graphical,  partly  textual 

5GL  general-purpose  functional 
programming  language 

3GL  programming  language 

Obtained  by  disassembling  the  compiled 
Common  Lisp  code.  Code  can  be  proved  to  be 
correct  per  requirements. 
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WATCH® 


IV 


What  my 
program  is 
saying  is,  ‘I 
can  tailor  the 
algorithm  for 
your  applica¬ 
tion  for  free.’ 

GORDON  NOVAK, 

PROFESSOR  OF 
COMPUTER  SCIENCE, 
UNIVERSITY  OF  TEXAS 
AT  AUSTIN 


I  want  to 
allow  pro¬ 
grammers  to 
write  policies 
at  a  very  high 
level  and  then 
have  them 
automatically 
enforced. 

DOUGLAS  SMITH, 

PRINCIPAL  SCIENTIST, 
KESTREL  INSTITUTE 
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DEFINE  YOUR  OPEN  ENTERPRISE™ 

In  my  Open  Enterprise,  I  can  add  applications, 
platforms  and  users  without  adding 
costs,  problems  and  barriers. 

Multiple  operating  systems.  Distributed  servers.  Proprietary  hardware. 
Without  a  data  center  solution  capable  of  integrating  and  managing  them 
all,  you’re  losing  time,  money  and  productivity.  Data  Center  solutions  from 
Novell®  cost-effectively  consolidate,  manage  and  support  all  of  your 
disparate  systems  on  the  most  mature,  scalable  and  secure  Linux* 

OS  available.  So  you  can  centralize  system  management.  Run 
leading  business  applications  with  the  power  of  Linux  and  open 
standards.  Lower  costs.  Improve  service  levels.  And  turn  your 
data  center  into  a  profit  center. 

Data  Center  solutions  from  Novell. 

This  is  the  way  to  build  your  Open  Enterprise. 

Novell® 

This  is  Your  Open  Enterprise.™ 

www.noveli.com/build 
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Expecting  All-in-One 
Security  Headaches 


The  state  is  imposing  all-in-one  security 
appliances  on  our  manager’s  agency,  and 
she  sees  more  cons  than  pros.  By  C.  J.  Kelly 


SECURITY  PRODUCTS 
are  converging,  and 
the  state  government 
wants  us  to  hop  on 
board.  The  bureaucrats  have 
good  reason  to  seize  what  they 
see  as  an  opportunity. 

Two  years  ago,  the  state 
legislature  refused  to  approve 
the  purchase  of  firewall  tech¬ 
nology  for  state  agencies,  such 
as  the  one  I  work  in.  Is  it  any 
wonder  governments 
fall  on  their  faces? 

You  want  legislators 
to  be  careful  with 
taxpayers’  money, 
but  how  can  they  not 
understand  that  fire¬ 
walls  are  important? 

Convergence  in  the  form 
of  all-in-one  appliances,  I  am 
told,  makes  business  sense.  It 
costs  less  and  produces  more, 
support  is  better,  it’s  easier  to 
manage  and  so  on.  I’ll  believe 
it  when  I  see  it.  My  concern 
is  that,  should  an  all-in-one 
appliance  be  compromised 
(and  anything  can  be  compro¬ 
mised),  you  won’t  just  have 
a  problem  with  your  firewall, 
your  virtual  private  network, 
your  security  information 
management  system,  your 
demilitarized  zone,  your  anti¬ 
virus  tools,  your  intrusion- 
detection  system,  your  Web 
filtering  or  your  intrusion- 
prevention  system.  You’ll  have 
a  problem  with  all  of  them. 

Security  must  be  layered  to 
be  effective.  Plunking  in  a  single 
device  at  each  site  is  not  a  good 
idea.  But  as  our  earlier  firewall 
fiasco  suggests,  we  have  had 
problems  getting  funding  for 
many  of  the  individual  devices 
and  tools  that  would  let  us 
follow  the  “defense  in  depth” 
model.  Apparently,  we  have 
the  OK  to  purchase  the  all-in- 


one  devices  and  deploy  them 
to  all  of  our  sites.  Well,  if  that’s 
what  we  can  get  approved,  at 
least  we’re  doing  something  to 
move  forward. 

The  drawbacks  of  all-in-one 
appliances  are  related  to  tech¬ 
nical  matters,  performance 
and  security.  In-line  deploy¬ 
ment  would  be  best  for  the 
appliance’s  intrusion-preven¬ 
tion  features,  but  that  makes 
it  a  single  point  of 
failure.  In  that  case, 
you  would  probably 
want  two  devices  in 
fail-over  mode.  The 
alternative  —  proxy- 
style  deployment 
—  limits  packet 
inspection  and  firewall  con¬ 
figuration.  As  for  performance, 
the  number  of  modules  or 
functions  applied  to  data  traf¬ 
fic  will  affect  the  appliance’s 
throughput,  unless  there  are 
multiple  CPUs  devoted  to  par¬ 
ticular  functions  rather  than 
a  single-purpose  CPU.  I’ve 
already  discussed  security. 
Compromise  the  box,  and  own 
the  network?  Maybe. 

On  the  other  hand,  manag¬ 
ing  a  multitude  of  single¬ 
purpose  security  systems 
takes  a  lot  of  manpower.  A 
farm  of  similar  multipurpose 
appliances  sounds  a  lot  easier 
to  manage  and  may  take  only 
one  or  two  trained  security 
administrators.  And  if  we 
could  do  things  like  Web  fil¬ 
tering,  firewall  configuration 
and  traffic  encryption  at  the 


Security 
must  be 
layered  to  be 
effective. 


gateway,  we  might  be  more 
effective  in  protecting  the  net¬ 
work  against  malware,  viruses, 
worms,  adware,  spam,  Trojan 
horses,  denial-of-service  at¬ 
tacks,  hacking  attempts  and 
all  the  other  things  we  guard 
against. 

No  Guarantees 

Why  don’t  I  have  any  faith  in 
these  types  of  appliances? 

I  told  my  boss,  “We  need  to 
do  this,  but  I  can’t  guarantee 
that  this  product  will  do  what 
it  is  supposed  to  do.”  We  can’t 
do  a  test-drive  ourselves  be¬ 
fore  we  buy,  because  the  state- 
level  guys  already  did  that. 

The  vendor  is  a  small  com¬ 
pany  that  doesn’t  want  to  go 
through  testing  with  dozens  of 
little  state  agencies.  Its  goal  is 
to  sell  some  of  its  stuff  fast  so 
it  can  say  that  it  landed  a  deal. 
So,  here  we  are.  I  feel  like  we 
are  buying  blind  and  following 
the  state’s  lead  like  sheep. 

I  predict  that  the  draw¬ 
backs  of  these  appliances  will 
become  apparent  over  time, 
forcing  vendors  to  go  back  to 
single-function  devices.  Even¬ 
tually,  though,  the  pendulum 
will  swing  back,  and  we’ll  see 
new  all-in-one  appliances  that 
are  better,  faster  and  smarter 
than  the  ones  being  hawked 
today.  This  sort  of  back-and- 
forth  isn’t  unusual.  Look  at 
what’s  happening  in  the  tele¬ 
com  sector  —  first,  AT&T  was 
busted  up,  then  lots  of  smaller 
phone  companies  joined  it  in 
the  marketplace,  and  eventual¬ 
ly  those  companies  began  gob¬ 
bling  up  one  another.  Today, 
we’re  looking  at  the  prospect 
of  a  new  AT&T  dominating 
once  again. 

On  the  ground  here  in  my 
state  agency,  we  have  to  de¬ 
cide  on  the  types  of  function¬ 
ality  we  need  the  most  and  use 
the  appliance  accordingly.  We 
will  certainly  want  firewall 
functionality  (maybe  even 
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most  state  legislators  would 
agree  with  this  assessment 
at  this  point),  but  we’ll  have 
to  decide  between  intrusion 
detection  and  intrusion  pre¬ 
vention.  Intrusion  detection, 
which  is  off-line  and  passive, 
is  somewhat  at  odds  with 
firewalls,  which  block  traffic 
based  on  rule  sets.  The  in-line 
configuration  of  intrusion 
prevention  might  work  better 
in  that  regard.  It’s  the  sort  of 
question  we’ll  have  to  have 
ready  when  we  meet  with  the 
vendor  for  a  demo  next  week. 

It  should  be  interesting. 

I’m  also  interested  in  the 
company  that  we’ll  be  deal¬ 
ing  with.  Having  never  heard 
of  it,  I  did  some  research  on 
Google.  Apparently,  it  hasn’t 
gotten  much  press.  Its  own 
Web  site  doesn’t  even  have  any 
information  about  its  founders, 
board  of  directors,  company 
history  or  financials. 

Another  type  of  conver¬ 
gence  could  help  brighten  this 
picture.  Maybe  this  little  com¬ 
pany  will  be  acquired  by  one 
of  the  bigger  security  vendors 
in  the  years  to  come,  which 
would  at  least  ensure  that  our 
agency  receives  support  down 
the  road.  Ideally,  one  of  the 
companies  that  I  am  familiar 
with  and  trust  —  like  Check 
Point,  Cisco  or  Symantec 
—  would  step  in  to  fill  this  role. 
I’m  not  saying  these  vendors 
are  perfect,  but  they  have 
track  records. 

By  my  calculation,  single 
devices  installed  at  each  of 
our  agency’s  major  sites  would 
cost  a  total  of  about  $30,000.  If 
we  have  to  double  that  number 
to  ensure  fail-over  capability, 
that’s  a  lot  of  dough  for  a  small 
state  agency.  If  deployment 
extends  to  our  smaller  sites, 
the  cost  gets  close  to  $100,000 
with  fail-over  capability.  Why, 
oh  why,  didn’t  they  just  let  us 
buy  some  Cisco  firewalls?  » 


WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  “C.J.  Kelly."  whose  name 
and  employer  have  been  disguised  for 
obvious  reasons.  Contact  her  at  mscjkelly® 
yahoo.com,  or  join  the  discussions  in  our 
security  blogs:  computerworld.com/ 
blogs/security 

To  find  a  complete  archive  of  our  Security 
Manager’s  Journals,  go  online  to 
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Researchers  Prove 
‘Virtual’  Threat 

Researchers  from  Microsoft 
Research  and  the  University 
of  Michigan  have  developed 
proof-of-concept  code  to 
demonstrate  how  to  hide 
rootkit  software  in  virtual 
machine  environments. 
Taking  advantage  of  known 
vulnerabilities,  the  rootkit 
places  a  virtual  machine 
monitor  beneath  Windows 
or  Linux  installations.  The 
rootkit,  dubbed  SubVirt,  is 
undetectable  because  secu¬ 
rity  software  doesn’t  have 
access  to  its  state. 

Hie  Deletion  Was 
Computer  Fraud 

A  federal  appeals  court  has 
ruled  that  employees  can’t 
delete  files  from  a  company 
computer  before  leaving 
their  jobs.  International 
Airport  Centers  LLC,  believ¬ 
ing  that  Jacob  Citrin  began 
doing  personal  business 
while  still  employed,  hoped 
to  find  incriminating  evi¬ 
dence  on  his  laptop.  A  lower 
court  initially  threw  out  the 
case  against  Citrin,  but  the 
appeals  court  said  he  had 
violated  the  Computer  Fraud 
and  Abuse  Act  by  deleting 
files. 


Data  Miner  Settles 


Datran  Media  Corp.  has 
agreed  to  pay  $1.1  million  to 
New  York  to  settle  a  lawsuit 
filed  by  the  state’s  attorney 
general.  The  lawsuit  alleged 
that  Datran  mined  data  from 
companies  that  had  pledged 
not  to  share  the  information. 
Datran  allegedly  knew  of 
the  pledges  but  nonetheless 
sent  spam  to  about  6  million 
e-mail  addresses  collected 
from  those  companies.  Un¬ 
der  the  agreement,  Datran 
must  cease  using  improp¬ 
erly  obtained  e-mail  ad¬ 
dresses,  destroy  those  it  has 
and  buy  no  lists  without  first 
checking  to  see  if  the  data 
has  use  restrictions. 
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The  Answer:  Proven  security. 


Vulnerability  Management 
Intrusion  Prevention 
E-Mail  &  Web  Security 
Anti-Spam 
Anti-Spyware 
Anti-Virus 


Zero-day  threats.  Modified  threats.  Encrypted  attacks.  With  McAfee®,  you’re  protected. 

Our  comprehensive  security  solutions  with  integrated  intrusion  prevention  technology 
proactively  protect  your  systems  and  networks.  It’s  the  same  technology  that  has  made  us  a 
leading  security  partner  to  the  U.S.  military.  Backed  by  more  than  15  years  of  experience 
protecting  and  supporting  our  customers,  McAfee’s  software,  hardware,  and  services  are 
a  proven  way  to  secure  your  business.  Learn  more  at  www.mcafee.com/enterprise 
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Microsoft,  Radvison 
Allow  SIP  Integration 

■  Microsoft  Corp.  and  Fairlawn, 
N.J.-based  Radvision  Inc.  an¬ 
nounced  a  licensing  agreement 
to  give  third-party  developers 
the  ability  to  write  software  that 
allows  integration  of  Microsoft 
Office  Live  Communications 
Server  (LCS)  with  non-Windows 
communications  systems  that 
comply  with  the  Session  Initia¬ 
tion  Protocol  (SIP).  Phones  and 
other  applications  such  as  in¬ 
stant  messaging  services  could 
be  connected  to  LCS  under  this 
scenario.  General  availability  of 
the  SIP  extensions  to  LCS  will  be 
in  the  second  half  of  the  year. 


RSA  to  Release 
Updated  ID  App 

■  RSA  Security  Inc.  in  Bedford, 
Mass.,  has  announced  that  RSA 
Federated  Identity  Manager  3.0, 
which  allows  the  use  of  secure, 
trusted  identities  for  communi¬ 
cations,  will  be  available  in  the 
second  quarter.  The  new  version 
includes  support  for  the  Security 
Assertion  Markup  Language  2.0 
protocol  as  well  as  improved 
manageability  and  scalability,  a 
redesigned  Web  browser-based 
graphical  user  interface  and 
new  tools  for  testing  federated 
connections,  according  to  the 
company.  The  software  can  be 
integrated  with  a  wider  range 
of  Web  application  servers  than 
previous  versions.  It’s  priced 
on  a  per-federated-connection 
basis  at  about  $50,000  for  three 
connections  or  $100,000  for  10 
connections. 


New  SGI  Blades  Use 
FPGA  Technology 

»  Silicon  Graphics  Inc.  in  Moun¬ 
tain  View,  Calif.,  has  started 
producing  blades  that  use  Xilinx 
Inc.’s  Virtex  field-programmable 
gate  array  (FPGA)  technology. 
FPGA  increases  performance 
by  extracting  some  applica¬ 
tion  algorithms  and  processing 
them  separately.  The  SGI  RASC 
RC100  computation  blade  is 
also  designed  to  work  with  SGI’s 
existing  Altix  servers.  Pricing 
starts  at  $22,750. 
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ROBERT  L.  MITCHELL 

Why  Good  Technologists 
Are  Hard  to  Find 


AT  the  recent  Computerworld  Premier  100 
conference,  IT  leaders  searched  for  a  clear 
pathway  through  many  challenges:  the  ris¬ 
ing  tide  of  globalization,  offshoring,  merg¬ 
ers  and  acquisitions,  and  rapid  technologi¬ 
cal  change.  Attendees  debated  how  to  make  postmerger 
IT  integration  projects  move  more  quickly  and  how  to 
consolidate  infrastructure  while  innovating  in  areas 
such  as  enterprise  data  warehouses  and  analytics  appli¬ 
cations  that  can  cut  costs  and  generate  revenues. 


One  of  the  more  per¬ 
plexing  conundrums, 
and  an  area  where  the 
answers  should  be  clearer, 
is  the  challenge  of  find¬ 
ing  enough  highly  skilled 
technologists.  “The  short¬ 
age  of  IT  talent  is  a  major 
challenge  to  staying  com¬ 
petitive,”  lamented  one 
P100  honoree  in  a  panel 
discussion.  But  where  IT 
sees  a  shortage,  the  public 
may  have  a  different  view. 

In  the  broadest  sense, 
there  is  no  shortage.  Tech¬ 
nically  speaking,  there  is 
exactly  enough  trained  IT  talent  in  the 
U.S.  market  to  fill  all  available  posi¬ 
tions  at  the  current  salary  levels.  That 
doesn’t  mean  that  the  labor  market 
isn’t  tight  or  that  it’s  not  difficult  to  find 
a  qualified  engineer  in  Plano,  Texas. 
But  those  who  put  all  of  the  blame  on 
public  schools,  higher  education  and  a 
lack  of  interest  by  the  next  generation 
are  forgetting  something:  Students 
have  always  poured  into  the  most  lu¬ 
crative  and  promising  careers.  If  IT 
salaries  doubled  tomorrow,  college 
students  might  give  IT  another  look 
and  start  switching  majors;  the  flow 
of  newly  minted  technologists  would 
quickly  increase. 

If  only  it  were  that  easy.  Money  is 
just  part  of  the  solution.  Today’s  stu¬ 
dents  need  to  know  that  IT  is  a  viable 
long-term  career  path.  Unfortunately, 
industry  and  the  media  have  been 


complicit  in  propagating 
the  myth  that  IT  is  a  dead 
end.  First,  the  dot-com 
crash  shattered  the  illu¬ 
sion  that  those  in  high-tech 
jobs  would  always  emerge 
from  economic  turbulence 
unscathed.  Now,  students 
are  hearing  that  a  four-year 
degree  in  programming  or 
engineering  doesn’t  matter 
because  all  of  those  jobs 
will  eventually  go  offshore 
to  foreign  workers  at  very 
low  wages.  A  generation 
has  been  dissuaded  from 
pursuing  what  is  in  reality 
a  very  promising  career  choice.  But 
they  shouldn’t  have  been,  and  here’s 
why: 

■  IT  has  become  vital  to  business  profit¬ 
ability.  At  Harrah’s  Entertainment,  for 
example,  projects  that  are  part  of  an 
ongoing  operational  CRM  initiative 
are  producing  a  higher  internal  rate 
of  return  than  would  adding  buildings 
and  infrastructure,  and  the  CRM  proj¬ 
ects  are  generating  revenue  increases 
of  10%  to  50%.  Those  initiatives  de¬ 
pend  on  IT,  including  data  warehouse 
and  business  intelligence  technologies. 

■  The  fast  pace  of  technological  change 
keeps  IT  careers  interesting.  As  the  costs 
of  processing  power,  storage  and  con¬ 
nectivity  continue  to  drop,  more  and 
more  business  processes  are  being  auto¬ 
mated.  IT  is  and  will  continue  to  be  a 
growing  part  of  business. 

■  The  threat  of  offshoring  is  overstated. 
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Globalization  is  indeed  redistributing 
some  IT  jobs.  Many  positions  — 
especially  those  that  can  be  virtual¬ 
ized  —  are  migrating  to  low-wage 
locations.  But  many  aren’t  going  any¬ 
where.  Ultimately,  all  business  is  local. 
Cultural,  proximity  and  time-zone 
limitations  do  matter  because  they  can 
affect  customer  service,  customer  trust 
and  customer  loyalty.  Perhaps  that’s 
why  Dell  is  expanding  its  call  center 
in  Oklahoma  instead  of  New  Delhi. 
Meanwhile,  broadband  and  voice  over 
IP  are  giving  more  U.S.  workers  the 
agility  to  compete  by  working  from 
home  in  virtual  call  centers. 

■  The  globalization  of  IT  is  an  opportunity. 
Global  businesses  are  moving  some 
highly  skilled  IT  jobs  into  overseas 
offices,  placing  key  human  resources 
closer  to  customers  in  each  market. 
Some  view  this  as  an  exodus  of  skilled 
jobs  from  the  U.S.  But  the  idea  that  all 
highly  skilled  IT  jobs  in  a  global  com¬ 
pany  should  remain  centralized  here 
is  as  ridiculous  as  assuming  that  all  of 
those  jobs  will  go  to  India.  The  good 
news  is  that  the  next  generation  of 

IT  professionals  will  find  a  global  job 
market  with  opportunities  to  live  and 
work  in  many  different  countries. 

■  Demand  for  IT  workers  in  the  U.S.  will 
remain  strong.  The  H-1B  visas  that  en¬ 
able  foreign  workers  to  take  high-tech 
jobs  are  often  viewed  as  a  threat  to 
U.S.  workers,  rather  than  the  stopgap 
measure  they  are.  Former  Intel  CEO 
Craig  Barrett  has  stated  that  wage 
differentials  aren’t  the  issue  and  that 
Intel  would  hire  more  U.S.  engineers 
if  it  could  find  them.  Educated  and  tal¬ 
ented  IT  professionals  are  in  demand 
no  matter  where  they’re  from.  That 
sentiment  was  backed  up  by  IT  leaders 
at  the  Premier  100  conference,  where 
70%  said  that  they  hire  the  most  quali¬ 
fied  workers,  regardless  of  citizenship. 

The  future  for  IT  is  brighter  and  the 
playing  field  more  level  than  the  public 
is  led  to  believe.  * 
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It’s  Not  Easy  Being  Green 

Eco-friendly  or  “sustainable” 
computing  is  an  idea  that’s  been 
catching  on  very  gradually.  But  its 
benefits  will  become  more  appar¬ 
ent  over  the  next  few  years.  Here’s 
what  it’s  all  about.  PAGE  36 


Q&A 

Managers’  Forum 

What  do  you  do  when  your  manager  wants 
you  to  explain  highly  technical  work  in  a 
sound  bite?  Paul  Glen  has  some  suggestions. 
He  also  looks  at  how  to  deal  with  the  brilliant 
techie  who  can’t  hit  a  deadline.  PAGE  38 


OPINION 

Automated  Bill  Paying: 

Have  We  Gone  Too  Far? 

In  the  early  days  of  IT-enabled  online  bill  paying, 
Barbara  Gomolski  was  a  gung-ho  advocate.  But 
she’s  recently  developed  a  more  conservative 
strategy  regarding  this  “improvement.”  PAGE  40 


U.S.  firms  are  adopting  the  ‘Colin  Powell’ 
approach  to  IT  buying:  short  lists,  fast  tracks 
and  magic  quadrants.  BY  GARY  ANTHES 


THE  DAYS  when  nobody  got 

fired  for  buying  IBM  are  long 
gone.  But  these  days,  select¬ 
ing  IT  products  is  becoming 
ever  more  complex  as  vendors  and 
their  offerings  proliferate.  Buyers  are 
responding  to  the  difficulty  in  two 
ways:  by  limiting  choices  to  a  short  list 
of  preferred  suppliers,  and  by  finding 
ways  to  fast-track  the  product  selec¬ 
tion  process. 

But  shortening  what  was  once  a 
painstaking  (and  often  painful)  evalu¬ 
ation  process  introduces  risks  that 
must  be  carefully  managed,  acknowl¬ 
edge  fast-trackers. 

Since  2000,  The  Boeing  Co.  in  Chi¬ 
cago  has  whacked  its  list  of  preferred 
IT  suppliers  in  half,  to  40  companies. 
Greg  Farmer,  director  of  IT  procure¬ 
ment  at  the  $52  billion  company,  says 
that  has  helped  Boeing  deal  with  the 
complexity  of  the  supplier  landscape, 
but  the  complexity  of  the  stuff  it  buys 
has  not  decreased. 

“In  the  past,  we’d  go  out  and  do  a 
request  for  information,  learn  about 
the  companies,  read  about  them,  and 
after  this  exhaustive  study  we’d  say, 
‘OK,  now  well  go  to  these  five  sup¬ 
pliers  with  a  request  for  proposals,’  ” 
Farmer  says.  “More  and  more  now,  we 
look  at  the  Gartner  Magic  Quadrant 


[see  graphic,  next  page]  and  say,  ‘Who 
are  the  top  players?’  and  then  send  the 
requests  for  proposals  out  to  them.” 

It  isn’t  just  the  complexity  of  ven¬ 
dors  and  products  that’s  driving 
Boeing’s  buying  practices.  “There  is 
so  much  pressure  at  Boeing  to  reduce 
costs  and  be  lean  and  efficient,”  Farmer 
says.  “We  don’t  have  the  time,  energy 
or  resources  to  duplicate  what  [firms 
like  Gartner]  have  already  done.” 

Another  trend,  he  says,  is  to  see 
products  through  the  eyes  of  the  busi¬ 
ness  rather  than  the  lens  of  technology. 
Indeed,  his  60-person  IT  buying  team 
is  not  populated  with  technologists 
and  does  not  report  to  the  CIO.  They 
are  business  people  with  IT  buying 
experience,  and  they  report  to  a  vice 
president  for  supplier  management. 

Different  Strokes 

When  MIT  recently  looked  to  buy 
business  intelligence  software,  CIO 
Jerry  Grochow  resisted  advice  to  do 
a  very  detailed  analysis  of  the  many 
potential  vendors  and  their  BI  offer¬ 
ings.  Instead,  he  just  picked  Hyperion 
Solutions  Corp.  “We  had  some  people 
around  MIT  who  had  used  Hyperion 
elsewhere,  and  they  were  very  satisfied 
with  it.  And  it  was  clearly  one  of  the 
market  leaders,”  he  says. 
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Do  As  We  Say, 
Not  As  We  Do 

'  CAREEREDUCATION  CORP.  in  Hoffman 
Estates,  III.,  leans  toward  the  expedited 
procurement  philosophy.  “We  are  a 
fast-paced  company,  and  my  experience 
has  been  that  by  the  time  you  get  done 
evaluating  everything,  the  business  has 
changed,”  says  CIO  Mark  Griesbaum. 

“We  have  been  very  successful  in  our  IT 
group  because  we  take  everything  in  very 
manageable  chunks  that  can  be  delivered 
in  a  timely  fashion." 

He  says  limiting  the  number  of  vendors 
a  company  buys  from  simplifies  choices, 
contributes  to  uniform  standards  and 
encourages  those  select  vendors  to  offer 
executive  briefings,  technology  previews 
and  other  kinds  of  preferred  services. 

But  Griesbaum  warns  of  hubris  when 
the  IT  shop  buys  for  itself.  He  says  IT 
may  make  the  business  units  go  through 
detailed  justifications  for  products  but 
then  forget  the  rules  for  its  own  purchases. 
“When  you  get  a  bunch  of  technical  folks 
together . . .  they  get  enamored  with  the 
technology,”  he  says. 

He  recalls  buying  a  software  develop¬ 
ment  and  testing  tool  that  didn’t  work 
out  completely  as  planned.  “We  didn’t 
go  through  the  rigor  that  we  should  have 
and  maybe  trusted  some  things  the 
vendor  said  a  little  too  much,”  Griesbaum 
explains.  “Sometimes  we  are  our  own 
worst  enemy.” 

-GARY ANTHES 


■  ■ 


MIT  limited  its  risk  by  bringing  in 
the  BI  product  for  a  “quick  prototype,” 
Grochow  says.  “Rather  than  spending 
$20,000  on  analysis  of  the  feature  sets 
of  alternatives,  I  said,  ‘Let’s  bring  one 
in  and  spend  $20,000  to  do  something 
with  it.’  We  learned  more  by  doing  that.” 

Still,  Grochow  acknowledges  that 
such  a  rapid-fire  “try  it  then  buy  it”  ap¬ 
proach  is  not  always  possible  or  appro¬ 
priate.  MIT  will  soon  spend  up  to  nine 
months  and  $500,000  evaluating  stu¬ 
dent  information  systems  —  about  as 
mission-critical  as  IT  gets  on  campus. 
“Other  schools  have  spent  $30  million 
to  $40  million  on  them,  so  we  are  go¬ 
ing  to  go  through  a  significant  study, 
lots  of  review  of  alternatives,  detailed 
visits  to  other  places  that  are  using 
them  and  so  on,”  Grochow  says. 

ING  Group  NV  has  offices  and 
CIOs  all  over  the  world,  and  the  CIOs 
sometimes  come  to  Raymond  Kar- 
renbauer,  group  chief  architect,  for 
help  with  their  IT  purchases.  He  says 


■  At  a  high  level,  pick  a  vendor  whose  product  suite  maps  well  to 

your  internal  IT  architecture. 

■  Bring  in  one  or  two  products  for  no-obligation  quick  prototyping. 

■  Follow  documented  policies,  even  when  taking  shortcuts. 

■  Let  a  market  research  firm  do  some  prescreening. 

■  Talk  to  users  at  other  companies. 

■  Regardless  of  approach,  make  sure  you  listen  to  your  users. 


doing  in-depth  analyses  of  alternatives 
is  common  practice  in  the  European 
and  Asian  business  units.  “They  spend 
time  very  diligently  looking  at  accu¬ 
racy,  predictability,  all  the  features  and 
requirements,  until  they  have  a  near¬ 
perfect  set  of  details,”  he  says.  Then 
the  buying  decision  must  be  approved 
at  multiple  levels  in  the  company. 

But  North  American  companies 
are  more  likely  to  apply  the  “Colin 
Powell”  philosophy  to  IT  buys.  The 
former  secretary  of  state,  according  to 
Karrenbauer,  “used  to  say  that  as  long 
as  he  had  70%  of  the  data,  that’s  good 
enough  to  make  a  decision  and  just 
move  forward.”  The  difference  reflects 
a  U.S.  business  culture  of  moving  very 
quickly,  but  both  paths  work  well  for 
their  respective  regions,  he  says. 

Karrenbauer  says  he  can  select  ven¬ 
dors  and  products  quickly  because  of 
the  homework  he  does  beforehand.  He 
starts  with  an  internal  system  archi¬ 
tecture  for  the  corporation  that  factors 
in  business  requirements  and  fore¬ 
casted  needs.  The  resulting  framework 
of  business  needs  against  architectural 
standards  makes  the  actual  product 
selection  pretty  straightforward,  he 
says.  Certain  vendor  “footprints”  will 
be  readily  seen  as  good  fits,  while  oth¬ 
ers  obviously  are  not,  he  says. 

Dennis  L’Hereux,  CIO  at  Rockford 
Health  System  in  Rockford,  Ill.,  says 
his  company  has  gone  from  a  philoso¬ 
phy  adopted  more  than  10  years  ago  of 
buying  best-of-breed  products  for  each 
function  to  one  in  which  preference 
is  given  to  buying  suites  of  integrated 
products  from  just  a  few  vendors.  Best- 
of-breed  products  are  likely  to  better 
address  the  needs  in  question,  but  they 
often  require  the  use  of  integration 
tools,  “and  that  requires  a  lot  of  effort,” 
he  says. 

For  example,  when  L’Hereux  recent¬ 
ly  looked  for  a  medication  safety  soft¬ 
ware  package,  he  considered  just  the 
four  offerings  from  preferred  vendors, 
not  the  15  to  20  that  were  available.  But 
those  four  contenders  each  received  a 
detailed  evaluation. 

Managing  Expectations 

The  detailed  analysis  helped  L’Hereux 
choose  the  right  package,  of  course, 
but  it  had  a  side  benefit  as  well,  he  says. 
“It’s  an  exercise  for  the  people  who  will 
use  the  system  to  understand  what  it 
will  do  and  what  they  want  it  to  do,” 
he  says. 

That  exercise  can  head  off  unpleas¬ 
ant  user  scenarios.  “They  all  want 
everything,  but  when  they  get  it,  they 
don’t  want  to  use  it  because  it  doesn’t 
work  like  the  old  way,”  L’Hereux  says. 


Or  another  unwanted  user  reaction: 
“Bring  it  in,  and  then  I’ll  tell  you  why  I 
don’t  want  it,”  he  says. 

Like  Boeing,  Rockford  Health  relies 
on  market  research  to  provide  some 
guidance.  L’Hereux  taps  into  the 
analyses  of  Klas  Enterprises  LLC,  an 
IT  product  research  firm  for  the  health 
care  industry,  to  help  him  prescreen 
products  and  vendors. 

L’Hereux  says  it  was  once  standard 
practice  for  IT  shops  to  put  together 
“very  detailed  requests  for  proposals  in 
three-ring  binders  with  everything  we 
wanted  in  a  system.”  But  in  addition  to 
being  time-consuming  and  costly,  he 
says,  that  process  “doesn’t  materially 
result  in  any  better  decision.” 


Indeed,  says  MIT’s  Grochow,  spend¬ 
ing  a  lot  of  time  on  an  IT  buy  is  no 
guarantee  of  success.  “People  will 
say,  ‘Let’s  examine  the  details  of  all  30 
alternatives.’  Do  they  come  up  with  a 
significantly  better  decision  than  the 
person  who  says,  ‘Here  are  the  two 
market  leaders;  let’s  bring  one  of  them 
in  here  and  try  it’?” 

But  doesn’t  studying  every  alterna¬ 
tive  help  cover  your  rear?  “It’s  a  hall¬ 
mark  of  the  more  senior  manager:  You 
have  to  be  willing  to  take  some  risks,” 
Grochow  says.  “Sometimes  the  risk  is 
explicit,  and  sometimes  it’s  implicit. 
The  people  doing  the  detailed  analyses 
are  still  taking  some  risks;  they  just 
don’t  think  they  are.”  » 


SOURCE:  GARTNER  INC..  JULY  2005 


_THE  INVASION 

_DAY  11:  These  commoditized  clones  have  taken  over. 
Haven’t  been  outside  in  days.  Living  off  instant 
coffee  and  a  tin  of  breath  mints.  :-( 

_DAY  12:  They’re  breeding.  Multiplying.  Multiple 
apps.  Multiple  databases.  They  must  have  a  queen. 


_Help. . . me . . . . 
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William  Hill  had  an  admirable, 
if  unanticipated,  return  on  in¬ 
vestment  when  he  overhauled 
the  IT  infrastructure  for 
Dayton,  Ohio:  He  helped  the  environment.  Hill’s 
strategy  included  replacing  the  old  setup  —  a  disor¬ 
ganized  mix  of  80  archaic  networked  terminals  and 
numerous  ad  hoc  PCs  of  varying  ages  and  operating 
systems  —  with  thin  clients  for  60%  of  the  staff  and 
PCs  for  the  rest,  strategically  positioned  for  optimum 
use.  Hill  opted  for  thin  clients  for  technological  and 
cost  reasons,  but  says  he  saw  a  corresponding  drop  in 
how  much  energy  his  organization  uses  —  a  drop  that 
saves  the  city  between  $60,000  and  $90,000  annually. 

Hill  is  not  the  only  one  beginning  to  notice  IT’s 
impact  on  the  environment.  Other  CIOs  are  starting 
to  talk  about  how  much  energy  their  systems  use  and 
how  they  can  be  more  efficient  and  thus  friendlier  to 
the  environment.  Even  so,  the  real  impetus  for  green 
computing  —  also  called  sustainable  computing  —  is 
the  green  cash  that  eco-friendly  decisions  can  save. 

“There’s  always  a  company  out  there  doing  some¬ 
thing  to  be  eco-friendly,  but  for  most  companies,  it 
has  to  make  money  sense,”  says  Thomas  Bolioli,  pres¬ 
ident  of  Terra  Novum  LLC,  a  consulting  company  in 
Watertown,  Mass.,  that  advises  IT  departments  on 
energy  efficiency. 

Bolioli  says  companies  are  starting  to  better  balance 
their  computing  requirements  with  the  desire  to  re¬ 
duce  energy  consumption  and  the  corresponding  costs. 
They’re  employing  power  management  software  to 
power  down  PCs  when  not  in  use,  and  they’re  opting 
for  more  energy-efficient  components,  such  as  LCDs 
rather  than  CRT  monitors,  when  refreshing  hardware. 

Early  Sprouts 

There’s  no  doubt  that  sustainable  computing  is  on  the 
rise.  A  recent  conference  on  opportunities  for  energy 
savings,  co-sponsored  by  the  U.S.  Environmental 
Protection  Agency,  drew  about  200  attendees,  includ¬ 
ing  some  from  big-name  players  such  as  AT&T  Inc., 
Target  Corp.  and  Visa  U.S.A.  Inc. 

“It’s  great  if  people  do  things  strictly  for  the  benefit 
of  the  environment.  But  increasingly,  the  more  reso¬ 
nant  message  is,  ‘Look,  as  competitive  entities,  we 
have  to  do  more  with  less.  So  why  not  use  less  elec¬ 
tricity  as  well?’  ”  says  Andrew  Fanara,  team  leader 
at  the  EPA’s  Energy  Star  program,  which  promotes 
more  energy-efficient  IT  infrastructures  and  policies. 

The  savings  can  be  significant,  says  Jeff  McNaught, 
vice  president  of  marketing  operations  at  Wyse 
Technology  Inc.  in  San  Jose.  His  company  supplied 
the  thin  clients  for  the  city  of  Dayton,  and  he  says 
another  customer,  a  Fortune  100  retailer,  reports  sav¬ 
ing  $5.7  million  annually  in  electricity  costs  by  using 
some  70,000  thin  clients  instead  of  PCs. 

The  University  at  Buffalo,  part  of  the  State  Univer¬ 
sity  of  New  York  system,  has  an  aggressive  program 
to  cut  overall  energy  consumption  that  is  estimated 
to  be  saving  more  than  $10  million  annually.  Some 
of  those  savings  come  from  green  computing,  says 
Walter  Simpson,  the  energy  officer  at  the  UB  Green 
program. 

UB  figures  that  each  computer  uses  $100  worth  of 
electricity  a  year,  and  that  doesn’t  include  the  costs  to 
power  data  centers  and  servers.  There  are  additional 
costs  associated  with  keeping  server  rooms  and  com- 


Eco-friendly  computing  is  a 
concept  whose  payback  is  slowly 
catching  on.  by  mary  k.  pratt 


GREEN  TIPS 
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Enable  power  management  software  to  put  computers  in 
low-power  mode  when  not  in  use. 

• m  >  v.  *.*  r  «  *  v  *-  e»  *  ♦  *  s  e 

Require  workers  to  turn  off  printers,  monitors,  computers 
and  other  desktop  devices  when  they  leave  work. 
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Choose  specific  times  for  off-hours  maintenance. 
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Consider  energy-efficiency  products  such  as  thin  clients, 
LCD  monitors  or  Energy  Star-rated  PCs. 

Demand  components  that  contain  the  least  amount  of 
toxins,  such  as  those  labeled  lead-free. 

Buy  products  from  vendors  that  take  them  back  when 
your  company  replaces  them  to  ensure  safe  disposal. 

Use  responsible  recyclers  that  do  not  export  equipment 
to  developing  countries. 
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Check  out  www.computertakeback.com  for  more  options. 
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puter  workspaces  at  the  right  temperature. 

To  counteract  such  energy  demands,  Simpson 
encourages  UB  staffers  to  turn  off  computers  when 
they’re  not  needed,  and  he  uses  power  management 
software  to  put  employees’  monitors  in  sleep  mode 
when  not  in  use.  He  also  tries  to  hold  the  line  against 
wasteful  practices.  For  example,  when  IT  workers 
wanted  the  facilities  department,  which  houses  UB 
Green,  to  keep  its  several  hundred  computers  on  at 
night  to  accommodate  occasional  upgrades,  Simpson 
told  them  to  upgrade  during  the  day  or  pick  a  specific 
night  to  leave  the  computers  on.  “We’re  setting  an 
example,”  he  says. 

Aside  from  power  use,  there  are  other  green  issues 
in  IT.  When  Robert  Rosen  recently  ordered  130  new 
computers,  he  was  given  a  novel  option:  lead-free 
components.  Rosen,  CIO  at  the  National  Institute 
of  Arthritis  and  Musculoskeletal  and  Skin  Diseases 


in  Bethesda,  Md.,  and  president  of  Share,  an  IBM 
mainframe  user  group,  says  having  the  choice,  which 
came  at  no  additional  cost,  represents  a  growing  con¬ 
cern  about  the  toxins  in  computer  products. 

Troubling  Toxins 

According  to  the  Silicon  Valley  Toxics  Coalition  in 
San  Jose,  computer  equipment  contains  a  host  of 
toxic  materials,  including  lead  and  cadmium  in  cir¬ 
cuit  boards,  lead  oxide  and  barium  in  CRTs,  mercury 
in  switches  and  fiat  screens,  and  brominated  flame 
retardants  on  printed  circuit  boards  and  cables. 

In  addition,  a  2005  study  conducted  by  Greenpeace 
International  found  that  most  computers  collected  for 
recycling  in  the  U.S.  are  illegally  shipped  to  disassem¬ 
bly  sites  in  China  and  India,  leading  to  contamination 
of  the  environment  in  those  countries. 

Government  agencies  and  nonprofits  are  pushing 
for  changes,  and  they’re  being  joined  by  some  IT  ex¬ 
ecutives  and  technology  manufacturers.  NEC  Display 
Solutions  of  America  Inc.,  for  example,  is  scheduled 
to  be  the  first  monitor  company  whose  full  U.S.  prod¬ 
uct  line  will  be  lead-free.  It’s  also  educating  consum¬ 
ers  about  green  issues.  Richard  Atanus,  vice  president 
of  product  development  and  customer  service  and 
support  at  NEC,  says  manufacturers  and  users  will 
face  increasing  demands  for  toxin  reductions  and  re¬ 
cycling  as  European  Union  standards  take  effect  this 
summer  and  more  U.S.  states  start  to  pass  regulations. 

Those  regulations  will  prompt  changes  in  corpo¬ 
rate  IT  policies,  says  Joe  Wilcox,  an  analyst  at  Jupiter- 
Research  in  New  York.  “If 
disposal  is  an  extra  cost, 
then  it’s  a  problem  that 
someone  has  to  solve,”  he 
says,  adding  that  econom¬ 
ics  will  move  companies  to 
demand  toxin-free  compo¬ 
nents.  “If  they  can  dispose 
of  it  easier  because  there 
are  no  potential  toxins,  then  that’s  a  benefit  they  can 
appreciate,”  Wilcox  says. 

But  companies  have  been  slow  to  adopt  wholesale 
policies  to  foster  green  computing.  That’s  because 
sustainable  computing  requires  more  than  new 
products.  It  demands  changes  in  IT  policies  and  user 
behaviors,  as  well  as  cooperation  across  departments. 
And  it’s  tough  for  IT  organizations  to  deal  with  those 
challenges  when  they’re  already  occupied  by  day-to- 
day  demands,  Wilcox  explains. 

Still,  there  is  progress.  Rosen  says  government 
policy  requires  him  to  buy  Energy  Star-compliant 
computers,  which  are  more  energy-efficient  than 
those  without  the  designation.  Fanara  says  he  is  see¬ 
ing  similar  requirements  in  other  organizations. 

But  Rosen  acknowledges  that  many  IT  departments 
don’t  feel  the  need  for  green  policies  if  the  CIOs  aren’t 
held  responsible  for  the  energy  costs  or  disposal  fees. 
“It’s  one  of  those  issues  that  spans  groups,  [so]  every¬ 
one  thinks  it’s  someone  else’s  problem  to  deal  with,” 
he  says.  “What  happens  in  a  lot  of  places  is  that  no¬ 
body  pays  attention  to  it  until  the  CFO  gets  the  bills 
and  starts  jumping  on  everybody.”  » 


Everyone  thinks 
it’s  someone  else’s 
problem  to  deal  with. 

ROBERT  ROSEN,  CIO,  NATIONAL 
INSTITUTE  OF  ARTHRITIS  AND  MUS¬ 
CULOSKELETAL  AND  SKIN  DISEASES 


Pratt  is  a  Computerworld  contributing  writer  in 
Waltham,  Mass.  Contact  her  at  marykpratt@ 
verizon.net. 


/  have  control,  i  have  a  new  IBM  System  i57 


i  control  complexity.  The  one-of-a-kind  System  i5  is  server, 
storage,  software,  database,  and  security,  all  in  one. 

i  control  reliability.  The  System  i5  platform  helps  keep  you  up 
and  running  so  you  can  focus  on  your  business,  not  your  I.  T. 


I  control  flexibility.  This  uniquely  customizable  platform  lets 
you  run  multiple  operating  systems  (Windows!  Linux! AIX 5LT 
and  i5/0S‘)  simultaneously. 


i  control  my  I  .T.  destiny.  IBM  Systems  are  a  range  of  innovative 
servers  and  storage  -  like  the  System  i5  -  designed  to  make  your 
infrastructure  and  your  life  simpler. 


IBM.COM/TAKEBACKCONTROL/i5 

\ 


•Requires  IXS  or  IXA  to  run  Windows.  Linux,  Microsoft  Windows  and  A1X  5L  operating  systems  must  be  purchased  separately.  IBM,  A1X  5L,  System  i5,  i5/QS,  and  Take  Back  Contra!  are  trademarks  or  registered  trademarks  of  International  Business 
Machines  Corporation  in  the  United  States  and/or  other  countries.  Linux  is  a  trademark  of  Linus  Tbrvalds  in  the  United  States,  other  countries,  or  both.  Microsoft  and  Windows  are  trademarks  of  Microsoft  Corporation  in  the  United  States,  other  countries, 
or  both.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©200S  IBM  Corporation.  All  rights  reserved. 
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managers.  I’ll  do 
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your  questions, 

and  some  of  your 

ADVICE 

responses  will  run 
alongside  in  “Read¬ 
ers  Talk  Back.” 

PLEASE  SEND  YOUR  QUESTIONS, 

COMMENTS  AND  CRITIQUES  TO  ME  AT 

■  PGLEN@C2-eONSULTlNG.C0M. 

QOne  of  the  biggest  frustrations 
I’ve  had  with  many  managers 
is  that  they  always  want  me  to 
explain  things  in  overly  simplis¬ 
tic  terms.  Often  they  are  asking 
about  highly  technical,  complex 
issues  that  can’t  be  easily 
turned  into  a  sound  bite,  yet  they  insist  on 
artificial  simplicity.  Why  do  they  do  this, 
and  how  can  I  deal  with  them? 

This  represents  one  of  the  most  com¬ 
mon  frustrations  for  —  and  misunder¬ 
standings  between  —  technical  people 
and  their  managers. 

It’s  also  a  source  of  the  degradation 
of  respect  between  managers  and  their 
staffs.  Managers  are  frustrated  because 
they  believe  their  people  are  unable  or 
unwilling  to  share  information  about 
the  details  of  their  work.  If  a  manager 
believes  a  staff  member  is  unwilling 
to  share  information,  then  a  deep  mis¬ 
trust  of  the  staffer’s  motives  develops. 
The  manager  assumes  that  person  is 
trying  to  gain  power  through  knowl¬ 
edge  isolation. 

On  the  other  hand,  if  a  manager 
believes  that  someone  is  unable  to 


communicate  effectively  about  the 
details  of  his  work,  he  assumes  that 
this  person  will  be  limited  in  his  career 
development. 

For  technical  people,  it’s  equally 
frustrating,  because  it’s  often  difficult 
to  encapsulate  complex  technical  ideas 
in  simple  language.  They  assume  that 
if  the  boss  is  asking  for  an  oversim¬ 
plified  version  of  reality,  he  is  either 
unwilling  or  unable  to  understand 
the  nuances  of  the  technical  work  for 
which  he  is  responsible.  If  a  staff  mem¬ 
ber  believes  that  his  boss  is  unable  to 
understand  what  the  staffers  do,  then 
he  will  develop  the  belief  that  the  boss 
is  unqualified  to  supervise  them. 

In  addition,  if  staff  members  believe 
that  the  boss  is  unwilling  to  invest  the 
time  or  mental  energy  required  to  un¬ 
derstand  their  work,  they  assume  that 
their  boss  is  lazy  and  that  they  shouldn’t 
bother  working  so  hard  themselves. 

Unfortunately,  in  most  situations,  this 
mess  is  the  result  of  a  true  misunder¬ 
standing  between  managers  and  techni¬ 
cal  people.  Most  managers  know  that 
they  don’t  completely  understand  all  the 
details  of  the  technical  work  they  super¬ 
vise.  And  most  know  that  it’s  impossible 
to  summarize  such  work  in  less  than  a 
paragraph.  But  what  the  managers  often 
fail  to  do  is  ask  the  right  questions. 

Usually,  when  a  manager  asks  some¬ 
one  to  explain  a  complex  technical 
issue  in  simple  language,  what  he’s 
really  asking  for  is  not  a  summary  or  a 
simplification.  What  he  means  to  ask  is, 
“What  information  do  I  need  to  under¬ 
stand  in  order  to  make  good  decisions 
about  this  issue?  And  what  information 
do  I  need  to  understand  in  order  to 
communicate  effectively  with  our  cli¬ 
ents  and  supervisors?” 

This,  of  course,  is  an  entirely  differ¬ 


ent  matter.  What  is  really  going  on  is 
that  managers  are  trying  to  understand 
the  information  that’s  critical  to  per¬ 
forming  their  jobs.  If  they  were  to  be 
more  articulate  about  what  they  really 
needed  and  wanted,  a  large  amount  of 
strain  could  be  removed  from  the  man¬ 
agerial  and  technical  relationship. 


Ql  manage  a  programmer  who 
is  technically  brilliant  but  is 
failing  to  meet  all  his  deadlines. 
What  should  I  do? 

First,  you  need  to  understand 
why  this  person  is  missing 
the  deadlines.  These  are  the 
most  common  reasons: 

O  Unrealistic  deadlines. 

Q  Lack  of  commitment  to  meet  deadlines, 
o  A  misunderstanding  about  the  relative 
priority  of  schedule,  budget,  feature  set 
and  quality. 

At  times,  all  of  these  things  are  inter¬ 
related,  but  it’s  most  important  to  un¬ 
derstand  the  source  of  the  problem. 

If  you  set  deadlines  without  the  con¬ 
sent  of,  or  validation  by,  your  brilliant 
technical  programmer,  they  may  not 
be  realistic.  Moreover,  they  may  not  be 
accepted  as  real  deadlines  but  merely  as 
estimates.  In  the  mind  of  a  programmer, 
there’s  a  huge  difference  between  esti¬ 
mates  and  deadlines. 

If  your  programmer  is  setting  his 
own  deadlines,  you  may  need  to  chal¬ 
lenge  him  to  become  more  accurate  in 
his  estimation  and  more  liberal  with 
buffer  time.  You  may  also  want  to  chal¬ 
lenge  him  to  treat  time  as  a  design  con¬ 
straint  rather  than  a  schedule  inconve¬ 
nience.  Again,  you  will  also  have  to  be 
clear  with  him  about  the  difference  be¬ 
tween  estimating  how  long  something 
will  take  and  committing  to  a  specific 
delivery  date. 

If  the  deadlines  are  realistic  but  he 
merely  lacks  the  will  to  meet  them,  you 
may  have  a  bigger  problem.  Brilliance 
alone  doesn’t  make  for  a  productive 
employee.  There  are  plenty  of  geniuses 
who  are  significantly  underemployed 
because  they  lack  the  will  to  do  more.  If 
this  is  the  case,  your  programmer  may 
be  able  to  deliver  only  limited  value  un¬ 
til  he  finds  his  own  motivation. 

This  problem  is  most  easily  dealt 
with  if  it  is  a  misunderstanding  about 
the  relative  priorities  of  schedule,  bud¬ 
get,  feature  set  and  quality.  At  the  outset 
of  any  assignment,  you  and  he  should 
explicitly  rank  each  of  these  priorities 
from  top  to  bottom.  Remember  that  as  a 
manager,  you  can’t  demand  that  all  four 
be  first  priorities.  If  deadlines  are  the 
most  important  success  factor  for  the 
project,  he  needs  to  know  it  and  adjust 
his  work  strategy  appropriately.  * 


READERS  TALK  BACK 

More  on  Project 
Managers  and  Sponsors 


One  of  the  challenges  of  project 
management  is  getting  committed, 
enthusiastic  and  motivated  mem¬ 
bers  for  the  team.  Whether  you’re 
a  full-time  project  manager  or  just 
given  the  job  to  ‘‘get  this  done”  in 
addition  to  regular  responsibilities, 
someone  in  authority  is  giving  you 
the  directive. 

Right  from  the  start,  let  the 
sponsor  know  what  you  will  need  to 
get  the  job  done.  The  best  tool  is  the 
project  charter.  No  matter  how  small 
a  project  is,  it’s  critical  for  you  to 
have  a  charter.  Identify  the  sponsor 
on  the  charter,  thereby  making  him 
accountable.  Use  the  charter  to 
clarify  and  commit  to  the  purpose 
of  the  project.  It’s  the  sponsor’s 
project;  you  are  just  the  instrument 
for  the  planning  and  execution. 

Tell  the  sponsor  how  he  can  help 
you  make  this  project  successful. 
Ask  the  sponsor  for  help  with 
people  you  have  no  control  over. 

He  may  even  have  authority  over 
their  bosses.  If  not,  let  him  hash 
it  out  with  his  peers  to  get  you  the 
resources  you  need. 

The  people  placed  on  your  team 
will  be  much  more  effective  if  they 
know  that  their  selection  is  endorsed 
by  their  boss.  And  your  team  will  be 
more  accountable  if  they  understand 
that  they’ll  be  evaluated  on  how 
their  performance  directly  affects 
the  success  or  failure  of  the  project. 

If  you’re  not  on  the  same  page 
with  your  sponsor  from  the  get- 
go  about  his  responsibility  and 
accountability  on  the  project,  you 
will  be  the  scapegoat  for  every 
delay,  failure  or  problem  that  arises. 
You  can  prevent  this  by  having 
an  upfront  relationship  with  your 
sponsor.  Make  the  sponsor  work  for 
you,  and  your  work  will  be  a  lot  less 
stressful.  -  S.M. 

Generally,  I  agree,  i  think  that 

with  the  sponsor.  If  the  charter 

: 

relationship,  then  it’s  useful.  But 

both  well  used  and  abused,  if  it’s 

: 

where  none  exists,  it’s  less  likely  to 
be  so  helpful.  -  PAUL  GLEN 
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Baseless  Optimism? 

The  practice  of  sending  IT  jobs  offshore  remains  con¬ 
troversial,  and  the  extent  of  the  phenomenon  remains 
murky.  The  Association  for  Computing  Machinery 
(ACM),  a  group  of  IT  professionals  and  academics,  re¬ 
leased  a  report  last  month  that’s  rather  optimistic  about 
the  future  of  IT  careers  in  the  U.S.,  but  it  was  promptly 
criticized  for  painting  such  a  bright  picture.  Association 
President  David  Patterson,  a  professor  of  computer 
science  at  the  University  of  California,  Berkeley,  told 
the  San  Francisco  Chronicle,  “People  who  could 
have  wonderful  careers  in  the  field  aren't  even 
considering  computer  science  because  they’ve 
got  the  wrong  facts.  If  you’ve  got  the  talents, 

this  is  a  pretty  exciting  field  with  lots  of  exciting  things  to  do.”  Patterson's  upbeat 
assessment  reflects  the  study’s  findings.  (It  also  reflects  columnist  Robert  L.  Mitchell’s  view 
of  IT  career  opportunities.  See  page  32.) 

The  ACM  used  Bureau  of  Labor  Statistics  figures  to  estimate  that  new  tech  jobs  are  being 
created  in  the  U.S.  as  fast  or  faster  than  they  are  being  shipped  overseas,  but  the  report  also 
decried  the  lack  of  reliable  figures  showing  the  extent  of  offshoring.  Ron  Hira,  an  assistant 
professor  of  public  policy  at  the  Rochester  Institute  of  Technology  who  has  studied  offshor¬ 
ing,  told  the  Chronicle,  “The  report  was  a  bit  overly  optimistic.  I  find  it  strange  that  although 
they  admit  there’s  no  good  data,  they  come  out  as  optimistic  that  this  isn't  that  big  a  deal." 
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Tech  Support  Salaries  on  the  Rise 


Title 

2004 

2005 

Change 

Senior  support  executive 

$100,000 

$112,500 

12.5% 

Department  manager 

$70,000 

$75,000 

7.1% 

Analyst/project  manager 

$60,000 

$65,000 

8.3% 

Senior  support  technician 

$50,000 

$55,000 

10% 

Field  support  technician 

$50,000 

$55,000 

10% 

Support  technician 

$40,000 

$42,000 

5% 

SOURCE  ASSOCIATION  OF  SUPPORT  PROFESSIONALS'  TECHNICAL  SUPPORT  SALARY  SURVEY,  FEBRUARY  2006.  DATA 
SUPPLIED  BY  171  PARTICIPATING  SUPPORT  ORGANIZATIONS  WITH  A  TOTAL  OF  MORE  THAN  12,000  SUPPORT  EMPLOYEES. 


Percentage  of  IT  jobs 
being  offshored  each  year. 


3% 

MMBBB  B 

Growth  rate  of  U.S.  IT 
employment  in  recent  years. 


SOURCE:  ASSOCIATION  FOR  COMPUTING 
MACHINERY.  FEBRUARY  2006 


ASK  A  PREMIER  100  IT  LEADER 


1 

‘ 


Hari 

Bezwada 


*  *  m 


TITLE:  Program 
manager,  informa¬ 
tion  technology 
systems 


^  :  J  ORGANIZATION: 

W  Pentagon  Renova- 

'  tion  &  Construction 

1r\r\  Program  Office, 
Arlington,  Va. 


•;t  I  E I  flCB  Bezwada  is  this  month’s 
guest  Premier  100  IT 

Leader,  answering  readers’  questions  about 
making  career  moves.  If  you  have  a  question 
you’d  like  to  pose  to  one  of  our  Premier  100 
IT  Leaders,  send  it  to  askaleader@com- 
puterworld.com  and  watch  for  this  column 
each  month. 


I  have  worked  as  a  technical  support 
specialist  for  almost  four  years.  How 
can  I  convince  employers  that  I  am  more 
than  a  tech-support  specialist?  I  have  a 
bachelor's  degree  and  applications,  net¬ 
working  and  programming  skills.  Above 
all,  do  your  best  in  your  current  job.  A  good  at¬ 
titude  can’t  be  taught  like  skills  can.  Managers 
will  recognize  a  good  attitude  and  make  sure 
you  get  the  skills  you  need  to  advance.  I  make 
it  a  point  to  expose  my  employees  with  good 


attitudes  to  various  job  responsibilities  so  they 
acquire  the  skills  they  need  to  move  up. 

You  can  always  discuss  your  skills  with  your 
managers  or  employers.  However,  rather  than 
just  saying  that  you  have  certain  skills,  offer  to 
utilize  them  for  upcoming  opportunities  and 
projects.  That  shows  you  have  the  right  outlook. 

I’m  a  CIO  at  a  small  financial  firm.  I 
would  like  to  earn  a  doctorate,  but  I’m 
concerned  that  it  might  be  perceived  as 
too  much  education  for  my  position  and 
could  be  a  detriment  to  my  career.  Your 
thoughts?  Higher  learning  should  never  be 
construed  as  an  obstacle  or  detriment  to  your 
career.  Jobs  may  come  and  go,  but  no  one  can 
take  away  your  knowledge  and  education. 

I  was  a  programmer/analyst  until  1997 
and  now  want  to  re-enter  the  IT  field. 
What’s  the  best  retraining  option?  Which 
languages,  operating  systems  and  job 
titles  are  in  demand  now?  My  back¬ 
ground  includes  an  MBA,  a  bachelor  of 
science  degree  in  math  and  experience 
with  Oracle,  SQL  and  Cobol,  but  I  have 
no  experience  with  object-oriented  tech¬ 
nology.  Oracle  and  SQL  are  in  much  demand. 
Refreshing  your  skills  in  those  programs  is  a 
good  way  to  re-enter  the  job  market. 

Also,  a  piece  of  advice:  When  you  pursue 
training,  don’t  consider  only  the  skills  that 
are  in  high  demand  today.  By  the  time  you’ve 
mastered  them,  they  might  be  passe.  Things 
change  quickly  in  IT.  Always  be  on  the  lookout 
for  the  next  big  thing,  and  never  stop  learning. 


IBER  2005 


Soaring  Head  Counts 


Compared  with  2004,  did  you  hire  more  new 
employees,  fewer  or  the  same  in  2005? 

More . 68.6%  — 

Same . .  20% — 

Fewer . 11.4%  — 


[You’re  not  a  real  techie  until  you’ve  had  an 
RFID  tag  implanted  in  your  arm  .  OK,  that  day  isn't  here 

yet,  but  it  might  be  coming  faster  than  you  think.  The  Associated  Press  reported  last  month  that  two 
workers  at  a  Cincinnati  video  surveillance  company  that  serves  businesses  and  governments  had 
rice-size  silicon  chips  surgically  embedded  just  beneath  the  skin  on  their  forearms.  They  volunteered 
for  the  procedure  to  test  the  effectiveness  of  radio  frequency  identification  tags  for  verifying  the  identity 
of  workers  who  have  access  to  vaults  where  data  and  images  are  kept  for  police  departments.  You 
have  to  wonder,  though,  what  would  happen  if  the  wrong  RFID  tag  were  implanted.  With  The  Procter  & 
Gamble  Co.  also  in  Cincinnati,  one  of  those  workers  might  now  be  identified  as  a  case  of  diapers. 
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BARBARA  GOMOLSKI 

Automated  Billing: 
Have  We  Gone  Too  Far? 


AVE  YOU  NOTICED  that  just  about  all  of 
your  creditors  are  pushing  automatic  on¬ 
line  bill  paying  in  a  big  way?  Fm  talking 
about  encouraging  customers  to  have 
their  billed  amounts  automatically  with¬ 
drawn  from  their  bank  accounts  each  month. 

I  actually  got  a  paper  bill  from  my  long-distance 
phone  company  the  other  day  that  informed  me  of  the 
following:  If  I  wish  to  continue  to  receive  a  paper  bill, 
I’m  going  to  incur  an  extra  charge  for  that.  If  I  view  and 
pay  my  bill  online,  I  won’t  incur  the  extra  charge.  This 
is  a  move  similar  to  what  some  airlines  have  done  in 
imposing  a  nominal  penalty  for  buying  tickets  over  the 
phone  instead  of  online. 


I  know  why  companies 
are  eager  to  move  custom¬ 
ers  to  automatic  online  bill 
paying.  It  saves  them  tons 
of  money  in  printing  and 
postage.  But  is  it  really  the 
best  thing  for  customers? 

And  are  companies  really 
able  to  provide  accurate 
bills  that  we  don’t  have  to 
audit?  (I  realize  you  can 
still  audit  an  online  bill. 

I’m  making  an  assumption, 
however,  that  in  our  busy 
world,  people  who  get  their 
bills  online  don’t  spend  as 
much  time  reviewing  them 
as  those  of  us  who  still  get 
paper.) 

In  the  early  days  of  automatic  with¬ 
drawal  for  bills,  I  was  a  gung-ho  advo¬ 
cate.  It  seemed  like  a  great  idea,  largely 
enabled  by  information  technology. 
Now  I  have  a  more  conservative  strat¬ 
egy  regarding  this  “improvement.” 

Here’s  how  I’m  approaching  the  is¬ 
sue  in  my  own  life: 

■  For  recurring  bills  such  as  mort¬ 
gage,  car  payments  and  insurance 
premiums.  I’m  perfectly  comfortable 


with  direct  and  automatic 
withdrawal  from  my  bank 
account.  These  bills  gen¬ 
erally  don’t  vary  from 
month  to  month,  so  I’m 
glad  to  have  the  opportu¬ 
nity  to  save  the  effort  of 
writing  either  electronic 
or  paper  checks. 

■  For  credit  card  state¬ 
ments,  I  still  want  to 
see  paper,  if  for  no  other 
reason  than  that  paper 
serves  as  a  personal  form 
of  “checks  and  balances.” 
(Did  I  really  spend  that 
much  at  Costco  last 
month?) 

■  For  bills  from  utilities  (such  as  the 
phone,  gas,  electric  and  water  compa¬ 
nies),  I  have  absolutely  refused  to  pay 
in  this  automated  fashion.  Quite  frank¬ 
ly,  I  have  found  too  many  mistakes  on 
such  bills  in  the  past.  I  know  that  if 
I  didn’t  receive  that  paper  statement 
every  month,  I  would  be  less  likely  to 
review  the  charges  and  catch  the  er¬ 
rors  online. 

If  it  sounds  like  I’m  being  a  bit 
cranky,  consider  this  scenario:  I  was 


BARBARA  GOMOLSKI,  a 

former  Computerworid 
reporter,  is  a  vice  president 
at  Gartner  Inc.,  where  she 
focuses  on  IT  financial 
management.  Contact  her  at 
barbgomolski@yahoo.com. 


recently  away  from  home  for  almost 
three  weeks.  Upon  returning,  I  found 
myself  facing  a  stack  of  mail,  several 
bills  and,  ultimately,  several  phone 
calls,  including  these: 

■  I  had  to  call  my  cell  phone  provid¬ 
er  and  have  it  remove  a  $75  charge  for 
a  service  I  tried  to  sign  up  for  while  on 
vacation  but  could  never  get  to  work 
(phone-to-Internet  stuff). 

■  I  had  to  call  my  local  phone  com¬ 
pany  and  have  it  remove  a  $30  charge 
for  a  second  DSL  connection  that  I  was 
being  billed  for  —  but  don’t  have. 

■  I  had  to  call  my  bank,  because 
while  I  was  away,  it  made,  and  then 
corrected,  a  banking  error  in  my 
checking  account.  The  problem  was, 
when  I  checked  my  statement  online, 
there  was  no  explanation  as  to  why 
this  money  was  going  in  and  out  of  my 
account.  I  found  out  what  was  going  on 
only  when  I  called  and  talked  to  a  live 
person. 

If  your  organization  is  contemplat¬ 
ing  a  campaign  to  aggressively  push 
automatic  bill  paying,  here’s  my  advice: 
Absolutely  get  the  bills  right. 

Billing  errors  have  long  plagued  cer¬ 
tain  industries,  such  as  telecom.  If  your 
company  in  one  of  those  industries, 
and  it  keeps  making  mistakes,  custom¬ 
ers  are  going  to  be  unwilling  to  give  up 
their  paper  bills.  Sure,  they  can  always 
view  their  bills  online,  but  in  this  busy 
world,  they  can  easily  forget. 

Also,  carefully  consider  the  implica¬ 
tions  of  charging  extra  for  the  “privi¬ 
lege”  of  receiving  a  paper  bill.  Not  all 
customers  have  computers  or  Internet 
access,  particularly  outside  of  the  U.S. 

As  for  me,  I’ll  pay  the  penalty  for  the 
privilege  of  receiving  my  long-distance 
bill  in  the  mail.  I  have  the  sneaking 
suspicion  that,  even  with  the  extra 
charge,  I’ll  still  come  out  ahead. » 


WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives  go  to 

www.computerworld.com/columns 


EXEC  TRACK 


ING  U.S.  Chooses 
Van  Wyk  as  CIO 

STEVE  VAN  WYK  has  been 
named  CIO  at  ING  U.S.  Financial 
Services,  the  U.S.  subsidiary  of 
ING  Groep  NV,  a  global  financial 
services  firm  based  in  Amster¬ 
dam.  Van  Wyk  comes  from  Mor¬ 
gan  Stanley,  where  he  was  most 
recently  CIO  and  chief  operating 
officer  of  the  individual  investory 
group. 


Schneider  Is  Named 
First  Global  CIO  at  VF 

Apparel  maker  VF  Corp.  in 
Greensboro,  N.C.,  announced 
that  MARTIN  SCHNEIDER  has 
joined  the  company  in  the  new 
position  of  global  CIO.  Schneider 
was  most  recently  vice  president 
of  global  technical  and  manufac¬ 
turing  systems  at  The  Gillette  Co. 


Pendergast  to  Lead 
Performant  IT  Group 

Performant  Financial  Corp.  in 
Livermore,  Calif.,  has  named 
JAYNE  PENDERGAST  CIO. 
Before  joining  Performant, 
Pendergast  was  the  first  CIO 
at  Appleseed’s  Holdings  Inc.,  a 
privately  held  women’s  clothing 
retailer,  where  she  created  the 
overall  IT  infrastructure. 


Textron  Selects 
Cantrel  as  CIO 

GARY  CANTRELL  has  been 
named  vice  president  and  CIO  at 
Textron  Inc.  in  Providence,  R.l. 
Previously,  Cantrell  held  several 
senior  roles  at  Bank  of  America 
Corp.,  most  recently  as  senior 
vice  president  of  enterprise  ac¬ 
cess  and  technology  services, 
and  senior  vice  president  of 
supply  chain  management  for 
technology  and  operations. 


Allard  Is  CIO  at  Spirit 

SCOTT  ALLARD  has  joined  Spirit 
Airlines  Inc.  in  Miramar,  Fla.,  as 
vice  president  and  CIO.  Allard 
most  recently  served  as  head 
of  technology  at  TravelWorm 
Inc.  and  previously  held  technol¬ 
ogy  management  positions  at 
Priceline.com  Inc.  and  American 
Express  Co. 
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“Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a  single 
index  and  returns  results  in  less  than  a  second”  —  InfoWorld 


For  hundreds  more  reviews  and  developer 
case  studies,  see  www.dtsearch.com 

Contact  dtSearch  for  fully-functional 
evaluations 


♦  over  two  dozen  indexed,  unindexed,  fielded  data 
and  full-text  search  options 


♦  highlights  hits  in  HTML,  XML  and  PDF,  while 
displaying  links,  formatting  and  tlilkliU.1.. 

♦  converts  other  file  types  (word  processor,  database, 
spreadsheet,  email  &  attachments.  ZIP.  Unicode, 
etc.)  to  HTML  for  display  with  highlighted  hits 

♦  Spider  supports  static  and  dynamic  Web  content, 
with  WYSWYG  hit-highlighting 

♦  optional  API  tor  C++,  .NET,  Java,  SQL.  etc. 

Ask  about  new  .NET  Spider  API 


dtSearch  vs.  the 
competition: 

“dtSearch  easily 
overpowered  the 
document  indexing 
and  searching 
abilities  of  other 
solutions, 
especially  against 
large  volumes  of 
documents” 

Reliability: 

“dtSearch  got  the 
highest  marks 
from  our  systems 
engineering  folks 
that  I've  ever 
heard  of” 

Results:  “customer 
response  has  been 
phenomenal” 


“The  most  powerful 
document  search  tool  on 
the  market” 

—  Wired  Magazine 

“dtSearch ...  leads  the 
market” 

—  Network  Computing 

“Blindingly  fast” 

—  Computer  Forensics: 
Incident  Response  Essentials 

“A  powerful  arsenal  of 
search  tools” 

—  The  New  York  Times 

“Super  fast,  super¬ 
reliable” 

—  The  Wall  Street  Journal 

“Covers  all  data  sources 
...  powerful  Web-based 
engines”  —  eWEEK 
“Searches  at  blazing 
speeds” 

—  Computer  Reseller  News 


The  Smart  Choice  for  Text  Retrieval"  since  1991 


Test  Center 


1-800-ITrFINDSl*lwww:dtsearch:;Com 


Reach  Respected  IT  Leaders  in 

dMPUTERWORLD 
Marketplace  Advertising  Section 

The  Computerworld  Marketplace  advertising  section 
reaches  more  than  1.8  million  IT  decision  makers  eve 
week.  Marketplace  advertising  helps  Computerworld 
readers  compare  prices,  search  for  the  best  values, 
locate  new  suppliers  and  find  new  products  and  services 
for  their  IT  needs. 


anew  era  of  VoIP  analysis 


You  convinced  management  to  deploy  VoIP. 
Now  ensure  that  it  will  run  smoothly. 

Rely  on  Network  Instruments'  Observer  to  help  keep 
VoIP  communications  running  at  optimal  performance. 


Learn  more. 

1-800-566-0919 

networkinstruments.com/voip 


©2006  Network  Instruments,  LLC.  All  rights  reserved.  Network  Instruments,  Observer,  and  all  associated 
logos  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC. 


COMPUTERWORLD 

Are  you  local  to  the  Boston,  Massachusetts  area? 

Computerworld  is  conducting  a  regional  search  for  an 
IT  Director  to  lead  a  staff  of  six  in  support  of  our  successful, 
fast-growing  organization. 

The  IT  Director  will  work  with  Computerworld  management 
to  translate  business  strategy  into  technology  strategy, 
recommend  and  implement  ST  policy  in  support  of  the  business, 
set  project  priorities,  and  ensure  strong  communication 
within  the  IT  group  and  across  the  organization.  The  IT 
group  has  responsibility  for  network  and  server  administration, 
application  development  and  support,  and  help  desk  and 
is  also  responsible  for  supporting  the  infrastructure  and 
hardware  for  Computerworld.com  and  all  of  the  event 
websites. 

Candidates  should  have  at  least  8  years  in  a  management 
role  in  an  IT  environment,  and  have  strong  technical,  leadership, 
communication,  organizational,  customer  service,  and 
interpersonal  skills.  Strong  project  management  skills  are 
required.  Familiarity  with  network  protocols,  security,  firewall 
and  VPN  technologies  is  required.  Technologies  in  place 
include  Windows,  Unix,  Linux,  Oracle  database,  SQL 
Server,  Notes/Domino  email,  VMWare,  and  .Net. 
Desktops  are  PC  and  Mac.  Applications  include 
Salesforce.com,  Adobe  products  (inDesign,  InCopy,  etc.), 
K4,  and  Interwoven,  as  well  as  many  in-house  developed 
applications.  Familiarity  with  the  publishing  business  is  a 
plus. 

Please  send  resumes  to  jobs@computerworid.com. 


Sr.  Software  Engineer: 

uXcomm,  Inc.  in 
Beaverton,  OR.  develop 
s/w  applications. 
Masters  required.  Fax 
Human  Resources  (503) 
748-6440  or  email 
HR@uxcomm.com 
EOE 


Vision  IT  Service  has  openings 
for  System  Analysts,  Software 
Engineers  or  DBA  using  special 
tools  (Oracle.  SAP,  DB2,  Java, 
VB.Net,  WebLogic,  WebSphere) 
per  project  requirements. 
Minimum  MS  or  BS+1-5yr  IT 
exp.  Travel  maybe  required. 
Apply  hr@visionit.com.  EOE. 

HIDEF  Technologies  seeks  IT 
Consultants.  Duties:  design, 
develop,  administer  &  implement 
software,  computer  &  database 
systems  per  clients'  business 
needs  using  various  skills  such 
as  Oracle,  DB2,  Java,  EJB, 
WebTech,  SAP,  VB.  C/C++,  etc. 
Travel  required.  Apply 
info@hideftech.com 


SOFTWARE  ENGINEER- 

Research,  design  &  develop 
Fax  Server  software  & 
communications  gateway 
systems.  Interact  w/ciients  in 
designing  messaging  sys. 
Use  .NET,  C/Visual  C++, 
DCOM,  SNMP,  Brooktrout 
/Dialogic  &  Oracle  to  integrate 
soft/hardware.  2  yrs  exp  & 
BS  Comp  Sci  or  Engnrng. 
Resumes  to:  emFAST  Inc, 
Attn-HR,  991  US  Highway 
22,  Bridgewater,  NJ  08807. 


Witness  Systems,  Inc.  is  seeking  a 
Software  Engineer  for  its  Santa 
Clara  location  to  design,  implement 
and  test  software  applications  for 
the  Witness  Systems  software 
suite.  Must  have  a  Master's  degree 
in  Electrical  Engineering  or  related 
field  plus  at  least  6  months  of 
experience  in  the  related  occupation 
of  forecasting  methods.  Experience 
may  have  been  gained  prior  to 
completion  of  Master's  degree. 
Salary  commensurate  with  experience. 
Send  cover  letter  and  resume  to 
Lisa  Franck,  H.R.  Manager, 
Witness  Systems,  Inc.,  Job  #KS  - 
Software  Engineer,  300  Colonial 
Center  Parkway,  Roswell,  GA  30076. 


Senior  Software  Engineer 
(Cordova,  TN)  Team  lead  in 
software  application  design, 
development,  installation  and 
modification  utilizing  minimum 
requirements.  Responsible  for 
development,  maintenance, 
and  enhancement  of  business 
applications.  Provide  business 
analysis  and  programming 
expertise  to  business  unit/area. 
Must  have  a  Bachelor’s  Degree 
or  foreign  degree  equivalent  in 
Computer  Science  or  related 
field  and  5  years  of  progressive 
experience  in  the  job  offered  or 
5  years  in  a  position  gaining 
progressive  software  application 
design,  development,  installation 
and  modification  experience 
including  2  years  in  software 
application  design  development 
in  banking  or  related  industry. 
Experience  may  have  been 
obtained  concurrently  and  must 
include:  (i)  5  years  J2EE 
Application  Server  administration 
experience  to  include  at  least  1 
year  with  Websphere;  (ii)  2 
years  experience  as  a  technical 
team  lead;  (iii)  2  years  integration 
experience  with  SQL  Server, 
Oracle  and  DB2;  (iv)  2  year 
experience  with  implementation 
of  design  artifacts  on  2  projects 
using  UML  in  either  Rational 
Rose  or  Visio;  (v)  2  years  experience 
providing  24  x  7  support  of 
J2EE  applications;  (vi)  integration 
with  LDAP  services  on  at  least 
2  projects  that  utilize  Active 
Directory,  Top  Secret  and  Novel 
Directory  Service;  (vii)  design 
and  implementation  of  at  least  5 
n-tier  large  projects  using  Java 
and  J2EE  skill  sets;  (viii)  design 
and  implementation  of  at  least  4 
n-tier  projects  using  non  -J2EE 
application  environment.  Must 
have  legal  authority  to  work  in 
U.S.  Resume  to:  Regions  Financial 
Corp,  Jeff  Miller,  (REF:  team) 
60  Commerce  Street,  10th 
Floor,  Montgomery,  AL  36109 


Chief  Technology  Officer. 
Leadership  position  to  drive 
product  and  solution  architectures 
involving  Compiler  Design  & 
Development  Principles,  Grammar 
Oriented  Object  Design 
Methodology,  Adv.  Software  Design, 
Object  Oriented  Framework 
Design,  Distributed  Computing, 
Delphi,  Java/J2EE,  C#,  Microsoft 
.NET  technologies  and  SML  for 
functional  programming.  Must  have 
Bachelor's  in  Computer  Sci.  or 
related  plus  2  years  exp.  in 
Medical  Management,  EDI  XI 2 
Framework  Design  &  HIPAA 
regulations;  Rational  Unified 
Process,  Unified  Modeling 
Language,  Entity  Relationship 
diagrams,  Object  Oriented 
Analysis  &  Design,  and  Business 
Process  Modeling.  Must  be  willing 
to  travel.  Contact  Paul  Holland, 
Paul  Holland  &  Associates,  5123 
Virginia  Way,  Suite  C-21, 
Brentwood,  TN  37027;  61 5-221-9022. 


Sales  Manager, 

e-leaming  Services  Oversees 
division  selling  IT  e-learning 
services  to  European  business 
clients.  Must  have  at  least 
2  years  experience  in  job 
offered.  Send  resume  to; 
CBT  Direct,  LLC,  25400  US 
19  N,  Suite  285,  Clearwater, 
FL  33763,  Attn.  K.  Cardinale. 


SG  Automotive  (Troy,  Ml)  seeks 
system  analyst  to  administer  LAN, 
develop  web  and  web-based 
applications,  supply  chain  manage¬ 
ment  system  using  special  tools 
and  skills,  interact  with  customers. 
Must  have  MSCIS  with  related 
experience.  Send  resume  to 
info@sgaxle.com.  EOE 

Infomerica  is  looking  for  system 
analysts,  DBA,  software  engineers 
&  computer  consultants  working  at 
different  sites  (travel  required)  using 
special  tools  per  client  requirements. 
Require  min  MS/BS  with  1  -5yr  IT  exp. 
Sponsor  HI  B  &  GC.  Send  resumes  to 
info@infomericainc.com  EOE. 


Computer  Information  Systems 
Manager  -  Manage  oracle  systems 
of  the  organization  including  oracle 
financials,  oracle  application  servers, 
oracle  databases  and  collaboration 
suite  (oracle  email);  Design  strategies 
and  projects  related  to  network  /systems 
/data  security,  oracle  applications, 
websites  &  disaster  recovery; 
Salaried/full  time  position.  Position 
requires  MBA  In  information 
Management  or  related  field  &  2 
years  exp  in  job  or  as  database 
administrator.  Job  site/interview  Allen 
Lund  Company,  La  Canada,  CA. 
email  resumes  to  resume@ 
allenlund.com 


Manager,  Technical  Services. 
Maytag  is  looking  for  a  qualified 
individual  to  fill  this  position  in 
Newton,  Iowa.  Oversees  and 
manages  large-scale  network 
operating  systems  including 
Enterprise  Computing,  Windows 
NT  architecture,  NT/Novell, 
Active  Directory,  Intel  Server 
and  Lotus  Notes  (mail,  calendar 
and  database)  areas.  Develops 
strategies  and  common  processes 
by  analyzing  user  requirements. 
Implements  procedures  to 
improve  existing  computer  systems, 
and  deploys  new  technologies 
and  standardizations.  Negotiates 
and  manages  Service  Level 
Agreements  with  business  units 
on  ail  large-scale  platforms. 
Analyzes  technologies  to  ensure 
they  are  operational  within  current 
operating  system  including 
analyzing  user  requirements, 
technologies  needs,  and  system 
constraints.  Qualifications  include 
a  minimum  of  a  Bachelor's 
degree  in  Computer  Science  or 
related  field,  or  equivalent. 
Must  aiso  have  at  least  five 
years  of  progressively  responsible 
experience  that  included 
management  of  large-scale 
enterprise  systems  for  a  Fortune 
500  company;  negotiation  and 
management  of  Service  Level 
Agreements;  and  implementation 
of  new  technologies  and 
standardizations.  For  consideration, 
please  apply  on-line  at 
www.careers.maytag.com. 
For  more  information  about 
our  company,  visit  us  at 
www.maytagcorp.com.  An 
Equal  Opportunity  Employer. 


Computer  &  Information  Systems 
Manager:  Shall  plan,  organize 
and  direct  the  activities  of  the 
helpdesk,  network  &  database 
applications.  Oversee  and  analyze, 
design,  development,  implementation, 
operation  and  administration  of 
databases  and  network  systems. 
Develop  and  implement  policies 
and  procedures  for  electronic  data 
processing.  Administer  Database 
and  Windows  Network  environment 
Supervise  development  and 
maintenance  of  proprietary  &  third 
party  applications.  Req.  Masters 
in  Computer  Sc.,  foreign  equiv. 
acceptable  plus  3  years  exp.  as  an 
information  technology  professional. 
Must  have  2  year  experience  in 
SQL  Server,  database  administration, 
data  modeling,  application  and 
database  development.  Must 
have  more  than  1  year  exp.  in 
setup  &  administration  of 
Windows  2000/NT  environment 
and  support.  Use  of  C,  VB,  Unix, 
Shell  Scripting,  Mathematica  & 
SQL  stored  procedures  required. 
Send  Resume  attention  Timothy 
Cottrell,  Job  No.  06-02,  The 
Lawrenceville  School,  Route  206, 
Lawrenceville,  NJ  08648. 


SAP  LABS 

has  openings  in  its 
Palo  Alto,  CA  office: 

DEVELOPER  IV 

( ID#  8409) 


CONTROLLER 

(ID#  8343) 

Mail  resume 
Attn:  Cora  Haussecker, 
Manager,  Global  Mobility 
Center  Americas, 

SAP  Labs,  3410  Hlllview  Ave, 
Palo  Alto,  CA  94304. 
Reference  Job  ID#.  EOE. 


ATTENTION: 

Law  Firms 
IT  Consultants 
Staffing 
Agencies 

Place 
your 
Labor 

Certification 
Ads  here! 


Are  you  frequently 

placing  legal  or 
immigration 
advertisements? 

Let  us  help  you 
put  together  a  cost 
effective  program 
that  will  make  this 
time-consuming  task 
a  little  easier. 
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Find  out  how  to  get  the  most  out  of 
your  job  search  and  your  career. 


Computerworld’s 
Careers  Knowledge 
Center 
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Get  the  latest  industry  news,  as  well 
as  valuable  job-  seeking  and  career 
enhancement  advice. 


Read  about  IT-related  issues  such  as: 

-  Hiring/recruiting 

-  Education/training 

-  Consulting/contracting 

-  Skills 


Remember,  knowledge  is  power, 
and  the  Careers  Knowledge  Center 
is  the  place  to  get  it! 


Go  to  www.computerworld.com  today. 


Technical  Specialist 

Develop  client  /  server  web 
application  for  SEC  Rule  10b5-1 
business  context;  lead  development 
process;  communicate  with  NYSE 
/NASD.  Mentor  developers.  Must 
have  Master's  in  Computer  Sci.  or 
related  plus  adv.  software 
engineering  ,  DBMS,  distributed 
computing  technologies;  must 
have  knowledge  of  Java,  Swing, 
J2EE,  WebSphere  /  Weblogic 
application  servers  and  OOP, 
design  methodologies  using  UML 
&  adv.  software  engineering 
design  patterns.  Send  resume  to 
SANS  Consulting  Services,  Inc, 
Attn:  Alex  Shteyman,  90  John  St., 
Suite  313,  New  York.  NY  10038. 


Sr.  Computer  Systems  Analyst: 

Corporate  Express  seeks 
applicants  for  the  position  of  Sr. 
Computer  Systems  Analyst  in 
Broomfield,  CO.  Engage  in  full  life 
cycle  software  development. 
Requirements  include  master’s 
degree  in  Computer  Science  or 
related  field  (Electrical  Engineering, 
Computer  Information  Systems) 
and  two  years  experience  as  a 
Software  Developer  or  a  bachelor  s 
degree  in  computer  science  or 
related  field  and  five  years  experi¬ 
ence  as  a  Software  Developer. 
Requirements  also  include  working 
knowledge  of  J2EE,  Hibernate, 
Eclipse  or  IDE  and  UML  Modeling 
Tools.  Send  resumes  to  Amy  Krill, 
Corporate  Express,  1  Environmental 
Way.  Broomfield,  CO  80021  Equal 
Opportunity  Employer 


Web  Application  Programmer 
(2  positions)  for  Kerzner 
International  Resorts,  Inc.  in 
Plantation,  Florida  to  manage, 
direct  and  oversee  Information 
Technology  (IT)  programming 
and  Web-based  programming 
operations  to  provide  the  technical 
architecture  of  Web  sites  for 
Company  to  ensure  accessibility, 
usability  and  reliability.  Qualified 
applicant  will  possess  a  Bachelor’s 
Degree  in  Computer  Science  or 
equivalent.  Forward  resumes  to: 
Human  Resources,  Kerzner 
International  Resorts,  Inc.,  1000 
South  Pine  Island  Road,  Suite 
800,  Plantation,  Florida  33324 
or  fax  to  (954)  809-2331.  No 
telephone  calls,  please. 


Millennium  Inc.,  Utah 
Programmer/Analyst 

Analyze  needs/design  computer 
programs.  Analyze  &  design 
database  and  programs. 
Determine  feasibility  of  projects, 
write  programs  /database 
using:  Sybase,  Powerbuilder, 
Dreamweaver,  MSSQL,  Power 
Designer.  Integrate  equipment 
with  programs,  coordinate 
development  of  programs  with 
other  programmers.  Teach  users/ 
test  programs.  Arrange  for 
installations  of  programs,  perform 
data  migrations/  transformations. 
Requires  Master  or  equivalent  + 
2  years  exp.  Send  resume  to 
PO  Box  1991,  Sandy,  UT  84091 . 


Web  Hosting  Infrastructure 
Specialist  Computer  Sciences 
Corporation  (CSC)  in  Newark 
.Delaware  Rqmts:  BS  and  2 
years  of  exp  reqd  in  Jrun, 
iPlanet,  Apache  and  Tomcat 
Go  to  www.careers.csc.com. 
Click  on  simple  search. 
Search  for  Req  #  2006RSA- 
PCMTH11510IL33  and 
submit  your  resume 


Java  Developers  needed 
at  unanticipated  client  sites 
to  dvlp  fin'l  products  using 
Core  Java,  J2EE  (EJB, 
JMS,  Appserver),  C++, 
extensive  OOD,  CORBA, 
SQL,  XML  &  XSLT,  RMI, 
Threads  &  Network  protocols, 
Sybase,  UML,  JBOSS, 
JNI,  Win32  &  Unix  (Solaris 
&  Linux,  Shell  progrmg)  . 
Resume  to:  Global 
Consultants,  Attn:  Hireme, 
25  Airport  Rd,  Morristown, 
NJ  07960. 


Golden  Way  Security  is  hiring  system 
analyst  and  database  administrator 
to  handle  software  and  computer 
issues  in  mortgage  business  using 
special  financial  tools.  MS  with 
some  experience  are  the  minimum 
requirement  Please  send  resumes 
to  28125  W.  Seven  Mile  Rd., 
Livonia,  Ml  42152 

In-Venture  Soft  is  seeking  IT 
consultants  to  design  &  develop 
applications  for  various  projects. 
Applicants  must  have  BS/MS  with 
solid  background  in  Oracle, 
WebSphere,  Java,  EJB,  ASP.  We 
offer  competitive  wage  with  full  benefit 
Travel  maybe  required.  Apply  at 
resume@ivsinc.net.  EOE. 


ETL  Developer  for  Kerzner 
International  Resorts,  Inc.  in 
Plantation,  Florida  to  design, 
develop  and  implement  new 
Extract,  Transform  and  Load 
(ETL)  electronic  data  processes 
for  Company  to  ensure  accessibility, 
usability  and  reliability. 
Qualified  applicant  will  possess 
a  Bachelor’s  Degree  in  Computer 
Application  or  equivalent. 
Forward  resumes  to:  Human 
Resources,  Kerzner  International 
Resorts,  Inc.,  1000  South  Pine 
Island  Road,  Suite  800, 
Plantation,  Florida  33324  or  fax 
to  (954)  809-2331.  No  tele¬ 
phone  cails,  please. 
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Web  Engineer  w/Masters  in  Comp 
Sci  or  Engg  or  Math  &  6  mos  exp 
to  research,  design,  develop, 
test  &  maintain  software  applications 
for  web-based  systems  using  Java, 
HTML,  XML,  ASP,  JavaScript, 
Macromedia  Dreamweaver,  Director, 
Flash  &  Adobe  Photoshop.  Interact 
w/the  back  end  server  database 
using  SQL  Server  &  Oracle.  Design 
database  schema,  build  supporting 
infrastructure,  develop  application 
code  &  write  test  plans  & 
documentation.  Provide  tech 
support  in  evaluating,  testing  & 
implementing  new  web  tools  & 
technologies.  6  mos  exp  as  Rich 
Media  Engineer  is  acceptable.  Mail 
resumes  to:  Soft  Tech  Source-A 
Division  of  Ramesh  Sarva  CPA, 
PC.,  109-17  72  Rd.,  Suite  #6-R, 
Forest  Hills,  NY  11375.  Job  loc: 
Forest  Hills,  NY  or  in  any  unantic¬ 
ipated  Iocs  in  the  USA. 


Programmer  Analyst  w/bache- 
lors  or  foreign  equiv  in  Comp  Sci 
or  Engineering  or  Math  &  2  yrs 
exp  to  analyze,  design,  develop, 
test  &  document  application  soft¬ 
ware  using  C,  C++,  Java  (JDK), 
Java  Script,  HTML,  PL/SQL, 
Unix  Shell  &  object  oriented 
Perl.  Analyze,  design  &  develop 
client  server  applications  in  Net  & 
Visual  Basic  using  Oracle,  SQL 
Server  &  Sybase  as  RDBMS  on 
Windows  &  Unix  operating  sys¬ 
tems.  Design,  develop  &  per¬ 
form  data  extraction,  transfor¬ 
mation  &  loading  into  data  ware¬ 
house  using  Erwin,  Informatica  & 
Oracle  Designer.  Mail  resumes  to: 
Ram  Associates,  3240  East 
State  St.  Ext.  Hamilton,  NJ 
08619.  Job  loc:  Hamilton,  NJ  or 
in  any  unanticipated  Iocs  in 
USA. 


SOFTWARE  ENGINEER 

w/Masters  or  foreign  equiv.  in  Info. 
Systems  or  Comp  Applications  or 
Comp.  Scie.  or  Engg  &  1  yr  exp  to 
research,  analyze,  design,  develop, 
test  &  implement  customized 
software  applications  using  Visual 
Basic.  Java.  JSP,  ASP,  XML  &  SQL 
Server  on  Unix  &  Windows  platforms. 
Design  &  deploy  transaction 
oriented  COM/DCOM  based 
components.  Convert  data  for  new 
clients  from  the  Legacy  Application 
developed  in  COBOL  to  SQL  Server. 
Mail  resumes  to:  Orient  International 
Inc.,  195  Carter  Dr.,  Suite  #5A  Edison, 
NJ  08817.  Job  loc:  Edison,  NJ 


It  Manager  for  NY  firm  to 
plan,  direct  or  co-ordinate 
activities  in  electronic  data 
processing,  Information 
sys,  Apply  w/2  resumes 
to  HRD,  Easy  Billing 
Systems,  Inc,  Hollowbrook 
Office  Park,  Bldg  1,11  Marshal 
Rd,  Ste  2k,  Whappingers 
Falls,  NY  12590. 
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FBI 

failure  of  the  Virtual  Case  File 
system  stemmed  partly  from 
management  shortcomings. 

The  Sentinel  project’s  pri¬ 
mary  goal  is  to  provide  FBI 
agents  with  “one-stop  shop¬ 
ping”  for  data,  Azmi  said.  Cur¬ 
rently,  he  said,  agents  often 
file  reports  on  paper  and  must 
log  into  different  databases  to 
search  for  information. 

Sentinel  also  incorporates 
the  FBI’s  broader  goal  of  seam¬ 
less  information-sharing  with 
other  law  enforcement  and  in¬ 
telligence  agencies.  Since  the 
9/11  terrorist  attacks,  “our  mis¬ 
sion  has  changed,”  said  Azmi, 
who  meets  regularly  with  his 


IT  counterparts  at  agencies 
such  as  the  CIA. 

The  reason  for  using  an 
SOA,  Azmi  said,  “is  to  make 
sure  we  are  interoperable” 
with  current  and  future  sys¬ 
tems,  both  inside  the  FBI  and 
at  other  agencies. 

Room  for  Improvement 

Despite  the  scrapping  of  the 
Virtual  Case  File  system, 
which  was  supposed  to  be 
based  on  custom  software 
developed  by  Science  Applica¬ 
tions  International  Corp.,  the 
FBI  doesn’t  view  that  project 
as  a  complete  loss.  Officials 
said  the  hardware  and  net¬ 
working  systems  installed  for 
the  earlier  initiative  will  be 
used  as  part  of  Sentinel. 

But  technology  isn’t  the  only 


DOJ  Auditors  Credit  FBI  on 
Sentinel  Planning  Efforts 


THE  INSPECTOR  GENERAL’S 

office  at  the  Department  of  Justice, 
which  has  been  highly  critical  of 
the  FBI’s  earlier  failed  attempts  to 
upgrade  its  IT  systems,  is  much 
more  upbeat  about  the  plans  for 
Sentinel. 

The  audit  report  released  last 
week  by  the  inspector  general  said 
that  after  reviewing  the  manage¬ 
ment  processes  and  controls  used 
in  the  vendor  evaluation  phase  of 
Sentinel,  “we  believe  that  the  FBI 
has  adequately  planned  for  the 
project.”  The  planning  work  “pro¬ 
vides  reasonable  assurance  that 
the  FBI  can  successfully  complete 
Sentinel  if  the  processes  and  con¬ 
trols  are  implemented  as  intended,” 
the  report  added. 

However,  it  cited  several  con¬ 
cerns  about  the  Sentinel  plans.  In 
addition  to  noting  that  the  project 
management  office  for  Sentinel  had 
yet  to  be  fully  staffed,  the  report  said 
there  are  still  questions  about  the 
system’s  ability  to  share  information 
with  computers  at  other  law  en¬ 
forcement  and  intelligence  agencies. 
And  it  remains  uncertain  whether 
Sentinel  can  provide  a  common 


framework  for  case  management 
systems  across  various  agencies, 
according  to  the  report. 

The  report  also  said  that  the 
inspector  general  will  continue  to 
monitor  the  FBI’s  system  security 
and  validation  plans  as  the  project 
evolves. 

As  of  December,  the  FBI  hadn’t 
completed  either  its  plan  for  secur¬ 
ing  Sentinel  or  one  for  validating 
and  verifying  that  the  system  works, 
the  report  said.  According  to  the 
report,  the  FBI  said  at  the  time 
that  the  security  plan  couldn't  be 
completed  until  the  lead  vendor  on 

B  Sentinel  provides  detailed  informa¬ 
tion  about  the  system’s  design; 
Lockheed  Martin  was  awarded  the 
contract  last  week.  Meanwhile,  the 
FBI  intends  to  award  a  separate 
contract  for  the  development  of  a 
validation  and  verification  plan. 

Those  explanations  were 
deemed  “reasonable"  by  the  in¬ 
spector  general’s  office,  the  report 
said.  But,  it  added,  DOJ  auditors 

Bwill  re-examine  the  FBI’s  progress 
on  the  two  plans  during  their  next 
audit  of  the  Sentinel  project. 

-  TODD  R.  WEISS 


thing  that  the  FBI  needs  to  im¬ 
prove  with  Sentinel.  Accord¬ 
ing  to  a  91-page  report  released 
last  week  by  the  U.S.  Depart¬ 
ment  of  Justice’s  inspector 
general,  the  Virtual  Case  File 
effort  failed  partly  because  the 
FBI’s  IT  project  management 
office  seemed  to  have  a  revolv¬ 
ing  door.  Virtual  Case  File  had 
“15  different  key  IT  managers 
over  the  course  of  its  life,”  the 
report  said. 

The  inspector  general 
recommended  that  the  FBI 
devote  “significant  staffing”  to 
Sentinel,  saying  that  doing  so 
“at  the  outset  of  the  project  is 
key  to  establishing  the  stable 
management  staff  required  to 
properly  oversee  the  project.” 
The  report  said  the  FBI  has 
yet  to  fully  staff  the  Sentinel 


program  management  office 
—  one  of  several  concerns  it 
raised  about  the  new  project 
(see  story,  this  page). 

Azmi,  who  was  named 
CIO  at  the  FBI  two  years  ago, 
said  he  has  reorganized  the 
bureau’s  IT  staff  in  an  effort  to 
improve  internal  project  man¬ 
agement  skills.  For  instance, 
when  he  arrived,  there  was 
only  one  project  manager  with 
a  professional  certification 
from  the  Project  Management 
Institute.  Now  the  bureau  has 
47  employees  with  PMI  certifi¬ 
cations,  Azmi  said. 

The  Sentinel  project  will  be 
run  internally  by  a  dedicated 
team  that  will  include  its  own 
redundant  management,  with 
primary  and  secondary  em¬ 
ployees  assigned  to  each  spot 


Lawson  Adds  WebSphere 
Middleware  to  App  Platform 


BY  MARC  L.  SONGINI 

Lawson  Software  Inc.  last 
week  announced  new  versions 
of  its  human  capital,  supply 
chain  management  and  finan¬ 
cial  software. 

In  addition,  the  company 
brought  out  a  platform  for  the 
applications,  called  Lawson 
System  Foundation  (LSF)  9, 
that’s  based  on  IBM’s  Web¬ 
Sphere  middleware  and  can 
exploit  service-oriented  archi¬ 
tecture  (SOA)  technologies. 

Lawson  had  announced 
plans  last  May  to  work  with 
IBM  to  develop  SOA  interfaces 
for  its  business  applications. 
LSF  9  replaces  Lawson  Tech¬ 
nology  8.1,  which  supported 
the  middleware  and  database 
products  of  multiple  vendors. 

Lawson  said  that  LSF  9  can 
serve  as  a  bridge  for  custom¬ 
ers  to  exploit  Landmark,  its 
WebSphere-based,  next-gener¬ 
ation  set  of  SOA  technologies 
for  linking  various  processes. 
Landmark  is  slated  to  ship 
later  this  year. 

One  early  adopter  of  the 
integration  technology,  North 


Carolina’s  Buncombe  County, 
found  that  LSF  9  allows  IT 
staffers  to  assign  user  access 
privileges  by  roles  and  classes. 
The  county  rolled  out  LSF  9 
last  month,  replacing  Lawson 
8,  said  accounting  manager 
Sonia  Burgin. 

Burgin  also  said  that  the 
new  version  of  Lawson’s  finan¬ 
cial  application  significantly 
speeds  the  process  of  clearing 
uncashed  checks  from  the 
system.  The  process  now  takes 
minutes,  whereas  it  used  to 
take  an  hour. 

The  county  is  also  deploying 
Lawson’s  new  business  intelli¬ 
gence  software  to  deliver  dash¬ 
boards  to  county  managers  to 
monitor  budgets  and  finances. 

LSF  9  includes  WebSphere, 
the  DB2  Universal  Database 
and  IBM’s  Tivoli  application 
management  software  as  well 
as  Lawson  technology,  said 
Maher  Hakim,  senior  vice 
president  of  product  strategy. 

Hakim  said  Lawson  is  of¬ 
fering  a  single-source  services 
package  that  covers  both  Law- 
son  and  IBM  products. 


on  the  team,  Azmi  said. 

The  contract  awarded  to 
Lockheed  Martin  is  valued 
at  $305  million  over  six  years, 
and  the  Bethesda,  Md.-based 
company  said  it  expects  to 
assign  about  200  people  to 
work  on  the  Sentinel  project. 
The  estimated  $425  million 
price  tag  for  the  entire  imple¬ 
mentation  includes  money  for 
additional  costs,  such  as  inde¬ 
pendent  system  validation  and 
verification  work. 

Sentinel  is  due  to  be  deliv¬ 
ered  in  four  phases.  The  first 
phase,  expected  to  be  com¬ 
pleted  in  about  a  year,  includes 
development  of  a  Web  portal 
that  will  enable  FBI  workers 
to  access  legacy  systems  via 
a  modern  user  interface  that 
supports  Web  services. » 


AT  A  GLANCE 

Lawson  System 
Foundation  9 

■  LSF  9  is  based  on  IBM  Web¬ 
Sphere  middleware. 

•  ••••••••  •,*  *  •  »  *.»•.»  «  «>  ».  4 

■  It’s  bundled  with  IBM’s  DB2 
database  and  Tivoli  application 
management  software. 

■  It  provides  an  SOA  founda¬ 
tion  for  Lawson  applications. 

. . . . 

■  LSF  9  is  required  for  new 
Lawson  process  management,  .  ... 
human  capital  management 

and  supply  chain. management  \ 
versions. 

■  It  works  with  Lawson  Busi¬ 
ness  Intelligence  9. 


This  isn’t  a  breakthrough  re¬ 
lease;  nevertheless,  it’s  one  of 
Lawson’s  most  significant  ever 
because  of  its  ability  to  exploit 
various  IBM  technologies,  said 
Albert  Pang,  an  analyst  at  IDC. 

LSF  9  is  available  now.  The 
Lawson  9  applications,  which 
require  LSF  9,  will  ship  by  May. 
Pricing  was  not  disclosed. 

The  company  last  week  also 
announced  that  it  has  started 
shipping  a  new  process  man¬ 
agement  tool.  » 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

FBI  2.0 

THINK  $500  million  is  a  lot  of  money?  That’s  how  much 
the  FBI  may  end  up  spending  over  the  next  six  years  on 
its  new  case  management  system,  dubbed  Sentinel  (see 
story,  page  1).  Maybe  you  remember  Sentinel’s  predeces¬ 
sor,  Virtual  Case  File.  The  VCF  project  lasted  four  years 
and  cost  a  mere  $170  million.  Of  course,  VCF  was  such  a  mess  that 
when  the  project  was  killed  one  year  ago  this  month,  it  was  completely 
useless.  Four  years  and  $170  million  later,  the  FBI  had  nothing  to  show 
for  it.  Now  that's  an  expensive  project. 

Can  the  FBI  do  any  better  today  with  $500  million?  Maybe. 


The  difference  won’t  be  the  money.  Three 
times  the  money,  spent  the  same  way,  would  just 
produce  a  hole  three  times  as  deep. 

The  difference  will  come  in  how  the  FBI  uses 
that  money.  And  right  now,  the  bureau  is  acting 
as  if  every  nickel  counts. 

For  example,  instead  of  building  a  bright,  shiny, 
all-new  vehicle  like  it  did  with  VCF,  the  FBI  is  go¬ 
ing  the  used-car  route  for  Sentinel.  It’s  using  the 
enterprise  IT  architecture  it  salvaged  from  the 
wreck  of  VCF.  It’s  borrowing  an  experienced  IT 
project  manager  from  the  CIA  and  an  acquisition 
contract  from  the  National  Institutes  of  Health. 
And  it  has  squeezed  $97  million  out  of  divisional 
budgets  for  the  first  of  the  project’s  four  phases. 

That’s  another  difference  with  Sentinel:  It  has 
four  clearly  defined,  overlapping  phases,  each 
with  deliverables.  VCF  didn’t  have  that.  Its  devel¬ 
opers  kept  plowing  ahead  as  technology  changed 
and  requirements  shifted  because  of  9/11.  After 
four  years,  VCF  delivered  nothing  useful. 

But  at  the  end  of  Sentinel’s  Phase  1, 18  months 
from  now,  FBI  employees  will  have  a  Web  portal 
for  access  to  their  creaky  old  Automated  Case 
Support  system,  plus  some  improved  case- 
summary  and  indexing  features. 

Later  phases  will  layer  on  workflow, 
indexing  and  paperless  case  man¬ 
agement.  But  even  if  the  next  three 
phases  never  happen,  users  will  have 
gotten  something  for  their  money. 

All  this  represents  a  very  smart 
approach,  especially  because  the  FBI 
has  two  problems  to  solve.  One  is 
delivering  Sentinel.  The  other  is  re¬ 
storing  its  credibility  when  it  comes 
to  big  IT  projects.  With  $170  million 
already  down  the  tubes,  the  bureau 
can’t  afford  another  botched  effort. 

Unfortunately,  at  a  casual  glance,  it 
looks  like  Sentinel  is  already  in  trou¬ 


ble.  The  contract  was  supposed  to  be  awarded 
last  November,  then  in  December.  It  finally  went 
to  Lockheed  Martin  last  week. 

That’s  a  nearly  six-month  schedule  slip  already. 
So  much  for  project  management  cred,  right? 

Now  look  closer.  It  turns  out  that  the  original 
schedule  didn’t  leave  enough  time  between  the 
request  for  proposals  and  the  bids.  Bidders  raised 
technical  questions.  The  bid  evaluation  team 
needed  more  data  from  bidders.  Some  elements 
of  the  project  that  were  originally  planned  to  be 
done  before  bidding  ended,  including  the  system 
security  plan,  depended  on  technical  details  of 
the  bids.  The  project  plan  had  to  be  reshuffled. 

So,  the  FBI’s  management  faced  a  tough  deci¬ 
sion  early  on:  Hit  the  deadline  and  risk  the  proj¬ 
ect,  or  miss  the  deadline  and  do  it  right.  Instead 
of  cheating  on  project  management  to  accommo¬ 
date  an  aggressive  schedule,  the  FBI  sacrificed 
the  Gantt  chart  to  make  sure  the  project  got  a 
good  start. 

Sure,  it  looks  bad  when  bid-award  day  arrives 
months  later  than  it  was  supposed  to.  But  unre¬ 
solved  problems  just  get  more  expensive  over 
time.  If  slipping  the  schedule  at  the  start  is  the 
price  for  nailing  down  problems 
early,  that  little  bit  of  embarrass¬ 
ment  and  delay  is  a  bargain. 

It  may  just  require  educating 
some  members  of  Congress  about 
the  realities  of  software  develop¬ 
ment  when  it’s  time  to  ask  for  the 
rest  of  that  $500  million. 

So,  has  the  FBI  got  it  right?  This 
time,  we  won’t  have  to  wait  four 
years  to  find  out.  Whether  bureau 
users  have  their  case  management 
Web  portal  by  the  end  of  2007  will 
tell  us  a  lot  about  how  well  the  FBI 
can  do  a  big  IT  project  the  second 
time  around.  > 


What  Does  It  All  Mean? 

New  help  desk  guy  is  still  getting  up  to  speed  at 
supporting  hundreds  of  different  applications,  so  it’s 
no  surprise  when  he  gets  a  little  confused,  reports 
a  second-level  communications-support  pilot  fish. 
“On  a  particularly  busy  day,  I  get  the  following  work 
ticket  from  him,”  fish  says,  “it  reads,  ‘User  sent 
e-mail  about  VM  not  working.  Am  not  familiar  with 
that  software.  Called  and  left  VM  to  clarify.’  ” 

Oops!  niiiBi/  cleaned  it  with 

This  computer  SHARK  compressed  air.” 

room’s  cooling  TA  lllfw 

system  goes  lAliliMk.  Corrected 
kaput,  and  I  can’t  log  in 

junior  operator  pilot  fish  from  my  office  PC  any- 
does  everything  she  more,  user  tells  pilot 
can  to  keep  things  cool  fish.  The  log-in  works 
until  the  repair  guys  ar-  from  other  computers, 
rive  -  dragging  in  fans  and  fish  himself  can  log 
from  the  warehouse,  in  from  the  suspect  ma- 
cranking  up  the  office  chine,  so  fish  is  puzzled, 
air  conditioning  and  “Then  I  noticed  a  little 
opening  all  the  security  flicker  in  the  username 
doors.  Finally,  fish  calls  field  just  as  he  hit  Enter 
her  boss  to  say  that  the  to  send  credentials  to 
temperature  seems  to  the  server,”  fish  says, 
be  steady  at  78  degrees.  “In  a  minute,  I  was  able 
“How  do  you  know  that?”  to  confirm  my  suspi- 
boss  asks.  Fish:  The  sys-  cions:  My  colleague 
tern  console  says  “temp  had  installed  a  memory- 
78.”  Boss:  “That  means  resident  spell  checker 
temporary  storage.”  that  had  determined 

that  his  username  was 
Nice  Guy  a  spelling  error  -  and 

Support  pilot  fish  gets  a  was  ‘correcting’  it  be- 
call  from  a  remote  retail  fore  sending  it  on  to  the 
site:  A  PC  is  plugged  in,  server." 
user  says,  but  it  won’t 
power  up,  and  neither  D’oh! 

will  the  monitor.  One  E-mail  server  goes 
45-minute  drive  later,  down,  and  panicked 

fish  is  tracing  the  power  sales  director  calls  IT 
cord  to  the  uninterrupt-  pilot  fish  in  desperation, 
ible  power  supply.  Turns  “You  have  to  get  the 
out  the  PC  is  plugged  in,  e-mail  fixed,  because 
but  the  UPS  isn’t.  “The  there  is  something 
counter  people  said  I  must  tell  my  West 

they’d  heard  beeping  for  Coast  sales  manager 
the  last  two  hours  but  today!”  We’re  working 
didn’t  think  anything  on  it,  fish  says,  but  in 
of  it,”  sighs  fish.  “I  the  meantime,  can’t  you 

reached  down  and  telephone  or  fax  the 

plugged  the  UPS  in.  To  sales  manager?  Pause, 
avoid  making  the  coun-  “I  would  have  thought 
ter  clerks  look  stupid,  I  of  that,  honest.  Thanks, 
took  the  PC  apart  and  goodbye!” 

THINK  OF  SHARKY,  and  send  your  true  tale  of  IT  life 
to  me  at  sharky@computerwor1d.com.  You’ll  get 
a  stylish  Shark  shirt  if  I  use  it.  And  check  out  Sharky’s  blog, 
browse  the  Sharkives  and  sign  up  for  Shark  Tank  home 
delivery  at  computerworld.com/sharky. 


FRANK  HAYES,  Computer- 
world’s  senior  news  columnist, 
has  covered  IT  for  more  than 
20  years.  Contact  him  at  frank. 
hayes@computerworld.com. 


Simplify  your  I.T.  and  your  business.  IBM  servers  and  storage  are  designed  to 
help  you  do  just  that.  Take  the  IBM  Total  Storage9  DS4300  Express  with 
DACstore.  It  is  designed  to  allow  you  to  reconfigure  or  add  capacity  while 
staying  up  and  running.  No  need  to  stop  to  reset  drives. 

Because  with  IBM  Express,  innovation  comes  standard.  That’s  true  for  servers, 
storage  and  printers.  What’s  more,  you  can  keep  your  technologies  current 
while  helping  to  reduce  costs  -  through  IBM  Global  Financing. 

All  things  considered,  an  I.T.  hero  deserves  nothing  less. 

MEET  3  HEROES  IN  THE  BATTLE  AGAINST  1.1  COMPLEXITY. 
YOU’RE  THE  4TH. 


IBM  TotalStorage  DS4300  Express 

4.2TB  with  1  controller;  16.8TB  with  2’ 

Support  for  RAID  0/1/3/5/10 
2.512MB  cache 

Scales  to  33.6TB  of  Fibre  Channel  Disk1 
Limited  warranty:  3  years  on-site2 

From  $7,790*3 

IBM  Financing  Advantage 

Only  $218/month4 
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IBM  eServer  xSeries  366  Express 

Up  to  four  64-bit  Intel*  Xeon*  Processors 
MP  3.66GHz  (single  core)/3GHz  (dual  core) 

2GB  memory,  expandable  to  64GB 
DDR  II  ECC  memory 

Six  64-bit  Active  PCI-X  2.0 

IBM  Director  to  help  monitor  performance 

Limited  warranty:  3  years  on-site2 
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IBM  TotalStorage  3580  Express 

Helps  protect  LTO!“  investment 
Built  on  Ultrium™  3  technology 

Read/write  compatible  with  Ultrium  2  drives 
-  read  compatible  with  Ultrium  1  drives 

Up  to  800GB  cartridge  capacity 
with  2:1  compression’ 

Limited  warranty:  3  years  on-site2 


From  $6,399* 

IBM  Financing  Advantage 

Only  $227/month4 


From  $5,999* 

IBM  Financing  Advantage 

Only  $168/monthJ 


Complimentary  IBM 
Systems  Advisor  Tool. 

Tell  the  IBM  Systems  Advisor 
what  your  IT.  needs  are.  And 
it  will  automatically  customize 
a  server/storage  system  that’s 
right  for  you. 


ibm.com/ 

systems/innovate21 


1  866-872-3902 

mention  104CE13A 


‘All  prices  stated  are  IBM's  estimated  retail  selling  prices  as  of  January  24, 2006.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are  subject  to  availability.  This 
document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  Prices  are  subject  to  change  without  notice.  Starting  price  may  riot  include  a 
hard  drive,  operating  system  or  other  features.  1.  Denotes  raw  storage  capacity.  Usable  capacity  may  be  less.  2.  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor  IBM  will  attempt  to  diagnose  and  resolve  the  problem 
remotely  before  sending  a  technician.  On-site  warranty  is  available  only  for  selected  components.  3.  Starting  price  does  not  include  hard  drives,  which  are  required  for  operation  of  the  machine.  4.  IBM  Global  Financing  offerings  are  provided 
through  IBM  Credit  LLC  in  the  United  States  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and  government  customers.  Monthly  payments  provided  are  for  planning  purposes  only  and  may  vary  based  on  your 
credit  and  other  factors.  Lease  offer  provided  is  based  on  a  FMV  lease  ol  36  monthly  payments.  Other  restrictions  may  apply.  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  IBM,  the  IBM  logo,  eServe: 
TotalStorage  and  xSeries  are  trademarks  or  registered  trademarks  ol  International  Business  Machines  Corporation  In  the  United  States  and/or  other  counlries.  Intel  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation 
or  its  subsidiaries  in  the  United  States  and  other  countries.  LTO  and  Ultrium  are  trademarks  of  Certance,  HP  and  IBM  in  the  U.S.  and  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others. 
©2006  IBM  Corporation.  All  rights  reserved. 


Oracle  Database  10 g 

#1  On  Windows 


ctfwxa-f 

OATAjtSbSor* 

ORACLE' 

database 

STANDARD  EDITION  ONE 

ORACLE' 

Starts  at  $149  per  user 


Oracle  Database  lOg— 

Easy  to  Use.  Easy  to  Manage.  Easy  to  Buy. 


oracle.com/start 
keyword:  #1onWindows 
or  call  1.800.633.0675 


Terms,  restrictions  and  limitations  apply.  Standard  Edition  One  is  available  with  Named  User  Plus  licensing  at  $149  per  user 
with  a  minimum  of  five  users  or  $4995  per  processor.  Licensing  of  Oracle  Standard  Edition  One  is  permitted  only  on  servers 
that  have  a  maximum  capacity  of  2  CPUs  per  server.  For  more  information,  visit  oracle.com/standardedition 


Copyright  ©  2005,  Oracle.  All  rights  reserved.  Oracle,  JD  Edwards  and  PeopleSoft  are  registered  trademarks  of  Oracle  Corporation  and/or  its  affiliates.  Other  names  may  be  trademarks  of  their  respective  owners. 


